--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"debug","ts":"2026-07-22T03:02:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:02:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:02:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/408137e4440abdaba6a4c1072d0c76db0c6f4d3565fd0687a2122902af8bce59"} {"level":"info","ts":"2026-07-22T03:02:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:02:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:02:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd"} {"level":"info","ts":"2026-07-22T03:02:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:02:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:02:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"408137e4440abdaba6a4c1072d0c76db0c6f4d3565fd0687a2122902af8bce59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:02:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:02:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["408137e4440abdaba6a4c1072d0c76db0c6f4d3565fd0687a2122902af8bce59"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac"} {"level":"info","ts":"2026-07-22T03:02:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"408137e4440abdaba6a4c1072d0c76db0c6f4d3565fd0687a2122902af8bce59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:02:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:02:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794"} {"level":"info","ts":"2026-07-22T03:02:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"408137e4440abdaba6a4c1072d0c76db0c6f4d3565fd0687a2122902af8bce59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:02:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:02:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"408137e4440abdaba6a4c1072d0c76db0c6f4d3565fd0687a2122902af8bce59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"717580a485fbb6b144146d5a2fb34c186925a79cf940abc46668f9aaf54c4bed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:02:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:02:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/408137e4440abdaba6a4c1072d0c76db0c6f4d3565fd0687a2122902af8bce59"} {"level":"info","ts":"2026-07-22T03:02:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"717580a485fbb6b144146d5a2fb34c186925a79cf940abc46668f9aaf54c4bed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"408137e4440abdaba6a4c1072d0c76db0c6f4d3565fd0687a2122902af8bce59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:02:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:02:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["408137e4440abdaba6a4c1072d0c76db0c6f4d3565fd0687a2122902af8bce59"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"408137e4440abdaba6a4c1072d0c76db0c6f4d3565fd0687a2122902af8bce59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:02:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:02:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd"} {"level":"info","ts":"2026-07-22T03:02:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"717580a485fbb6b144146d5a2fb34c186925a79cf940abc46668f9aaf54c4bed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"408137e4440abdaba6a4c1072d0c76db0c6f4d3565fd0687a2122902af8bce59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"717580a485fbb6b144146d5a2fb34c186925a79cf940abc46668f9aaf54c4bed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:02:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac"} {"level":"debug","ts":"2026-07-22T03:02:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"717580a485fbb6b144146d5a2fb34c186925a79cf940abc46668f9aaf54c4bed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:02:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:02:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"717580a485fbb6b144146d5a2fb34c186925a79cf940abc46668f9aaf54c4bed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"717580a485fbb6b144146d5a2fb34c186925a79cf940abc46668f9aaf54c4bed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:02:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/717580a485fbb6b144146d5a2fb34c186925a79cf940abc46668f9aaf54c4bed"} {"level":"debug","ts":"2026-07-22T03:02:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"717580a485fbb6b144146d5a2fb34c186925a79cf940abc46668f9aaf54c4bed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:02:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:02:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["717580a485fbb6b144146d5a2fb34c186925a79cf940abc46668f9aaf54c4bed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392"} {"level":"info","ts":"2026-07-22T03:02:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"717580a485fbb6b144146d5a2fb34c186925a79cf940abc46668f9aaf54c4bed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"717580a485fbb6b144146d5a2fb34c186925a79cf940abc46668f9aaf54c4bed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:02:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/408137e4440abdaba6a4c1072d0c76db0c6f4d3565fd0687a2122902af8bce59"} {"level":"debug","ts":"2026-07-22T03:02:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:02:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:02:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/717580a485fbb6b144146d5a2fb34c186925a79cf940abc46668f9aaf54c4bed"} {"level":"info","ts":"2026-07-22T03:02:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:02:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392"} {"level":"info","ts":"2026-07-22T03:02:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd3c0824-3105-4dd2-ace4-b4d9865e01e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:55770","PortSpecifier":{"PortValue":55770}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fd3c0824-3105-4dd2-ace4-b4d9865e01e1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-995f8f.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T03:02:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd3c0824-3105-4dd2-ace4-b4d9865e01e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:55770","PortSpecifier":{"PortValue":55770}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784689339,"nanos":923499834},"http":{"id":"fd3c0824-3105-4dd2-ace4-b4d9865e01e1","method":"POST","headers":{":authority":"e2e-shared-a-995f8f.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:02:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fd3c0824-3105-4dd2-ace4-b4d9865e01e1","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T03:02:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fd3c0824-3105-4dd2-ace4-b4d9865e01e1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1b8f5dc6-d648-43b5-a1c0-52422d83042f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6a1776ec-780a-4077-bf07-9fd8a76fea35"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa8b523815bc"]}} {"level":"debug","ts":"2026-07-22T03:02:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fd3c0824-3105-4dd2-ace4-b4d9865e01e1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa8b523815bc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6a1776ec-780a-4077-bf07-9fd8a76fea35"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1b8f5dc6-d648-43b5-a1c0-52422d83042f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"30dc239e7db8f6679cbce36f1ceb0cd72fb7ecb5337fac0fb59890fcdf9687fd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-995f8f.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:02:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd3c0824-3105-4dd2-ace4-b4d9865e01e1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:02:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd3c0824-3105-4dd2-ace4-b4d9865e01e1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:02:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd3c0824-3105-4dd2-ace4-b4d9865e01e1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-995f8f/auth-test-model-995f8f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-995f8f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:02:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fd3c0824-3105-4dd2-ace4-b4d9865e01e1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T03:02:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd3c0824-3105-4dd2-ace4-b4d9865e01e1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T03:02:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd3c0824-3105-4dd2-ace4-b4d9865e01e1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-22T03:02:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd3c0824-3105-4dd2-ace4-b4d9865e01e1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T03:02:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd3c0824-3105-4dd2-ace4-b4d9865e01e1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T03:02:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8523f5e-d218-4d2c-8604-d506847f2ee7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:36810","PortSpecifier":{"PortValue":36810}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c8523f5e-d218-4d2c-8604-d506847f2ee7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-bb8c9d.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T03:02:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8523f5e-d218-4d2c-8604-d506847f2ee7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:36810","PortSpecifier":{"PortValue":36810}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784689339,"nanos":963752910},"http":{"id":"c8523f5e-d218-4d2c-8604-d506847f2ee7","method":"POST","headers":{":authority":"e2e-shared-b-bb8c9d.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:02:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c8523f5e-d218-4d2c-8604-d506847f2ee7","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T03:02:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c8523f5e-d218-4d2c-8604-d506847f2ee7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1b8f5dc6-d648-43b5-a1c0-52422d83042f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6a1776ec-780a-4077-bf07-9fd8a76fea35"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa8b523815bc"]}} {"level":"debug","ts":"2026-07-22T03:02:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c8523f5e-d218-4d2c-8604-d506847f2ee7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa8b523815bc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6a1776ec-780a-4077-bf07-9fd8a76fea35"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1b8f5dc6-d648-43b5-a1c0-52422d83042f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-bb8c9d.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:02:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8523f5e-d218-4d2c-8604-d506847f2ee7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:02:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8523f5e-d218-4d2c-8604-d506847f2ee7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:02:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8523f5e-d218-4d2c-8604-d506847f2ee7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-bb8c9d/auth-test-model-bb8c9d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-bb8c9d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:02:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c8523f5e-d218-4d2c-8604-d506847f2ee7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T03:02:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8523f5e-d218-4d2c-8604-d506847f2ee7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T03:02:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8523f5e-d218-4d2c-8604-d506847f2ee7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-22T03:02:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8523f5e-d218-4d2c-8604-d506847f2ee7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T03:02:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8523f5e-d218-4d2c-8604-d506847f2ee7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T03:02:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"df355933-667e-434a-aa72-7a529c82f34a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:36816","PortSpecifier":{"PortValue":36816}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"df355933-667e-434a-aa72-7a529c82f34a","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-bb8c9d.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T03:02:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"df355933-667e-434a-aa72-7a529c82f34a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:36816","PortSpecifier":{"PortValue":36816}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784689340,"nanos":3209042},"http":{"id":"df355933-667e-434a-aa72-7a529c82f34a","method":"GET","headers":{":authority":"e2e-shared-b-bb8c9d.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:02:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"df355933-667e-434a-aa72-7a529c82f34a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1PW9ko9DtZeidZ8LY_LyXqtTnO4pVZq8jois53Dkp9LCiJCarfKiWtfxCwFj7"} {"level":"debug","ts":"2026-07-22T03:02:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"df355933-667e-434a-aa72-7a529c82f34a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-bb8c9d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1PW9ko9DtZeidZ8LY_LyXqtTnO4pVZq8jois53Dkp9LCiJCarfKiWtfxCwFj7\"}"} {"level":"debug","ts":"2026-07-22T03:02:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"df355933-667e-434a-aa72-7a529c82f34a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-bb8c9d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-22T03:02:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"df355933-667e-434a-aa72-7a529c82f34a","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-bb8c9d.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:02:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"df355933-667e-434a-aa72-7a529c82f34a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-22T03:02:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"df355933-667e-434a-aa72-7a529c82f34a","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-22T03:02:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"df355933-667e-434a-aa72-7a529c82f34a","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-07-22T03:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101"} {"level":"info","ts":"2026-07-22T03:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/66ca44d70c6c701b8c78b4c350f3d02ecaeec1d20ba383aa6c94763833e89c93"} {"level":"info","ts":"2026-07-22T03:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/717580a485fbb6b144146d5a2fb34c186925a79cf940abc46668f9aaf54c4bed"} {"level":"info","ts":"2026-07-22T03:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5211a47ea5360d2f06bfaecc4c229dae3fe4241463847177e4978d963b18e795"} {"level":"info","ts":"2026-07-22T03:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/408137e4440abdaba6a4c1072d0c76db0c6f4d3565fd0687a2122902af8bce59"} {"level":"info","ts":"2026-07-22T03:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac"} {"level":"info","ts":"2026-07-22T03:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/83a12d30a81f1388747732e84d4e50f890a9874696923955190bbc43059911ae"} {"level":"info","ts":"2026-07-22T03:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794"} {"level":"info","ts":"2026-07-22T03:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782"} {"level":"info","ts":"2026-07-22T03:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd"} {"level":"info","ts":"2026-07-22T03:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8bf1795814160890474789dfff655fe728eb6216dd5b2057d4bdbad9a4de6806"} {"level":"info","ts":"2026-07-22T03:02:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392"} {"level":"debug","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:02:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:02:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:02:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:02:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782"} {"level":"info","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:02:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:02:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782"} {"level":"info","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782"} {"level":"debug","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:02:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:02:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:02:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:02:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd"} {"level":"info","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd"} {"level":"debug","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:02:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:02:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782"} {"level":"info","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd"} {"level":"debug","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83a12d30a81f1388747732e84d4e50f890a9874696923955190bbc43059911ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:02:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:02:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83a12d30a81f1388747732e84d4e50f890a9874696923955190bbc43059911ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83a12d30a81f1388747732e84d4e50f890a9874696923955190bbc43059911ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:02:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:02:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83a12d30a81f1388747732e84d4e50f890a9874696923955190bbc43059911ae"} {"level":"info","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83a12d30a81f1388747732e84d4e50f890a9874696923955190bbc43059911ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83a12d30a81f1388747732e84d4e50f890a9874696923955190bbc43059911ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:02:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:02:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"83a12d30a81f1388747732e84d4e50f890a9874696923955190bbc43059911ae","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"83a12d30a81f1388747732e84d4e50f890a9874696923955190bbc43059911ae\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83a12d30a81f1388747732e84d4e50f890a9874696923955190bbc43059911ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83a12d30a81f1388747732e84d4e50f890a9874696923955190bbc43059911ae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83a12d30a81f1388747732e84d4e50f890a9874696923955190bbc43059911ae"} {"level":"info","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83a12d30a81f1388747732e84d4e50f890a9874696923955190bbc43059911ae"} {"level":"debug","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:02:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:02:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83a12d30a81f1388747732e84d4e50f890a9874696923955190bbc43059911ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:02:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:02:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83a12d30a81f1388747732e84d4e50f890a9874696923955190bbc43059911ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794"} {"level":"info","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794"} {"level":"info","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83a12d30a81f1388747732e84d4e50f890a9874696923955190bbc43059911ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:02:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:02:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83a12d30a81f1388747732e84d4e50f890a9874696923955190bbc43059911ae"} {"level":"info","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83a12d30a81f1388747732e84d4e50f890a9874696923955190bbc43059911ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:02:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:02:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794"} {"level":"info","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5211a47ea5360d2f06bfaecc4c229dae3fe4241463847177e4978d963b18e795","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:02:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:02:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794"} {"level":"info","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5211a47ea5360d2f06bfaecc4c229dae3fe4241463847177e4978d963b18e795","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:02:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:02:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5211a47ea5360d2f06bfaecc4c229dae3fe4241463847177e4978d963b18e795"} {"level":"info","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5211a47ea5360d2f06bfaecc4c229dae3fe4241463847177e4978d963b18e795","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:02:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:02:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5211a47ea5360d2f06bfaecc4c229dae3fe4241463847177e4978d963b18e795"} {"level":"info","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5211a47ea5360d2f06bfaecc4c229dae3fe4241463847177e4978d963b18e795","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:02:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:02:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794"} {"level":"info","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5211a47ea5360d2f06bfaecc4c229dae3fe4241463847177e4978d963b18e795","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:02:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:02:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5211a47ea5360d2f06bfaecc4c229dae3fe4241463847177e4978d963b18e795"} {"level":"info","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:02:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:02:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794"} {"level":"info","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5211a47ea5360d2f06bfaecc4c229dae3fe4241463847177e4978d963b18e795","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:02:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:02:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5211a47ea5360d2f06bfaecc4c229dae3fe4241463847177e4978d963b18e795"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5211a47ea5360d2f06bfaecc4c229dae3fe4241463847177e4978d963b18e795","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5211a47ea5360d2f06bfaecc4c229dae3fe4241463847177e4978d963b18e795","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794"} {"level":"debug","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:02:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:02:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5211a47ea5360d2f06bfaecc4c229dae3fe4241463847177e4978d963b18e795"} {"level":"info","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:02:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:02:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794"} {"level":"info","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:02:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:02:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:02:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:02:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101"} {"level":"info","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:02:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:02:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794"} {"level":"info","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:02:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:02:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101"} {"level":"info","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:02:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:02:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:02:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:02:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794"} {"level":"error","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:02:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:02:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:02:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:02:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101"} {"level":"error","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101"} {"level":"debug","ts":"2026-07-22T03:02:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:02:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:02:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"717580a485fbb6b144146d5a2fb34c186925a79cf940abc46668f9aaf54c4bed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:02:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:02:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"717580a485fbb6b144146d5a2fb34c186925a79cf940abc46668f9aaf54c4bed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/717580a485fbb6b144146d5a2fb34c186925a79cf940abc46668f9aaf54c4bed"} {"level":"debug","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"717580a485fbb6b144146d5a2fb34c186925a79cf940abc46668f9aaf54c4bed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:02:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:02:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["717580a485fbb6b144146d5a2fb34c186925a79cf940abc46668f9aaf54c4bed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"717580a485fbb6b144146d5a2fb34c186925a79cf940abc46668f9aaf54c4bed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"717580a485fbb6b144146d5a2fb34c186925a79cf940abc46668f9aaf54c4bed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:02:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:02:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["717580a485fbb6b144146d5a2fb34c186925a79cf940abc46668f9aaf54c4bed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101"} {"level":"error","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"717580a485fbb6b144146d5a2fb34c186925a79cf940abc46668f9aaf54c4bed","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"717580a485fbb6b144146d5a2fb34c186925a79cf940abc46668f9aaf54c4bed\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"717580a485fbb6b144146d5a2fb34c186925a79cf940abc46668f9aaf54c4bed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:02:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:02:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"717580a485fbb6b144146d5a2fb34c186925a79cf940abc46668f9aaf54c4bed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"717580a485fbb6b144146d5a2fb34c186925a79cf940abc46668f9aaf54c4bed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:02:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:02:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/717580a485fbb6b144146d5a2fb34c186925a79cf940abc46668f9aaf54c4bed"} {"level":"error","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"717580a485fbb6b144146d5a2fb34c186925a79cf940abc46668f9aaf54c4bed","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"717580a485fbb6b144146d5a2fb34c186925a79cf940abc46668f9aaf54c4bed\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"717580a485fbb6b144146d5a2fb34c186925a79cf940abc46668f9aaf54c4bed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"717580a485fbb6b144146d5a2fb34c186925a79cf940abc46668f9aaf54c4bed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/717580a485fbb6b144146d5a2fb34c186925a79cf940abc46668f9aaf54c4bed"} {"level":"debug","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:02:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:02:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392"} {"level":"info","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392"} {"level":"debug","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:02:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:02:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"717580a485fbb6b144146d5a2fb34c186925a79cf940abc46668f9aaf54c4bed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:02:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:02:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["717580a485fbb6b144146d5a2fb34c186925a79cf940abc46668f9aaf54c4bed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"717580a485fbb6b144146d5a2fb34c186925a79cf940abc46668f9aaf54c4bed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:02:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:02:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392"} {"level":"info","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"717580a485fbb6b144146d5a2fb34c186925a79cf940abc46668f9aaf54c4bed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:02:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:02:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"717580a485fbb6b144146d5a2fb34c186925a79cf940abc46668f9aaf54c4bed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:02:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:02:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"717580a485fbb6b144146d5a2fb34c186925a79cf940abc46668f9aaf54c4bed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"408137e4440abdaba6a4c1072d0c76db0c6f4d3565fd0687a2122902af8bce59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:02:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:02:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/717580a485fbb6b144146d5a2fb34c186925a79cf940abc46668f9aaf54c4bed"} {"level":"info","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"408137e4440abdaba6a4c1072d0c76db0c6f4d3565fd0687a2122902af8bce59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66ca44d70c6c701b8c78b4c350f3d02ecaeec1d20ba383aa6c94763833e89c93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:02:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:02:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66ca44d70c6c701b8c78b4c350f3d02ecaeec1d20ba383aa6c94763833e89c93","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bf1795814160890474789dfff655fe728eb6216dd5b2057d4bdbad9a4de6806","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:02:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:02:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bf1795814160890474789dfff655fe728eb6216dd5b2057d4bdbad9a4de6806","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:02:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:02:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"717580a485fbb6b144146d5a2fb34c186925a79cf940abc46668f9aaf54c4bed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:02:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:02:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["717580a485fbb6b144146d5a2fb34c186925a79cf940abc46668f9aaf54c4bed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392"} {"level":"info","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"717580a485fbb6b144146d5a2fb34c186925a79cf940abc46668f9aaf54c4bed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"408137e4440abdaba6a4c1072d0c76db0c6f4d3565fd0687a2122902af8bce59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:02:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:02:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/408137e4440abdaba6a4c1072d0c76db0c6f4d3565fd0687a2122902af8bce59"} {"level":"info","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"408137e4440abdaba6a4c1072d0c76db0c6f4d3565fd0687a2122902af8bce59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66ca44d70c6c701b8c78b4c350f3d02ecaeec1d20ba383aa6c94763833e89c93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:02:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:02:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66ca44d70c6c701b8c78b4c350f3d02ecaeec1d20ba383aa6c94763833e89c93","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bf1795814160890474789dfff655fe728eb6216dd5b2057d4bdbad9a4de6806","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:02:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:02:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66ca44d70c6c701b8c78b4c350f3d02ecaeec1d20ba383aa6c94763833e89c93"} {"level":"info","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"717580a485fbb6b144146d5a2fb34c186925a79cf940abc46668f9aaf54c4bed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:02:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:02:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"408137e4440abdaba6a4c1072d0c76db0c6f4d3565fd0687a2122902af8bce59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:02:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:02:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["408137e4440abdaba6a4c1072d0c76db0c6f4d3565fd0687a2122902af8bce59"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bf1795814160890474789dfff655fe728eb6216dd5b2057d4bdbad9a4de6806"} {"level":"info","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"408137e4440abdaba6a4c1072d0c76db0c6f4d3565fd0687a2122902af8bce59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66ca44d70c6c701b8c78b4c350f3d02ecaeec1d20ba383aa6c94763833e89c93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:02:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:02:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66ca44d70c6c701b8c78b4c350f3d02ecaeec1d20ba383aa6c94763833e89c93"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/717580a485fbb6b144146d5a2fb34c186925a79cf940abc46668f9aaf54c4bed"} {"level":"info","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66ca44d70c6c701b8c78b4c350f3d02ecaeec1d20ba383aa6c94763833e89c93","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bf1795814160890474789dfff655fe728eb6216dd5b2057d4bdbad9a4de6806","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:02:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:02:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8bf1795814160890474789dfff655fe728eb6216dd5b2057d4bdbad9a4de6806"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bf1795814160890474789dfff655fe728eb6216dd5b2057d4bdbad9a4de6806","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:02:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:02:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392"} {"level":"info","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:02:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:02:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"408137e4440abdaba6a4c1072d0c76db0c6f4d3565fd0687a2122902af8bce59","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac"} {"level":"debug","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66ca44d70c6c701b8c78b4c350f3d02ecaeec1d20ba383aa6c94763833e89c93","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bf1795814160890474789dfff655fe728eb6216dd5b2057d4bdbad9a4de6806","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:02:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:02:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/408137e4440abdaba6a4c1072d0c76db0c6f4d3565fd0687a2122902af8bce59"} {"level":"info","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66ca44d70c6c701b8c78b4c350f3d02ecaeec1d20ba383aa6c94763833e89c93"} {"level":"info","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:02:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:02:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bf1795814160890474789dfff655fe728eb6216dd5b2057d4bdbad9a4de6806"} {"level":"info","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392"} {"level":"info","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:02:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:02:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac"} {"level":"info","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac"} {"level":"info","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac"} {"level":"debug","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:02:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:02:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:02:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:02:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac"} {"level":"info","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac"} {"level":"debug","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:02:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:02:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac"} {"level":"info","ts":"2026-07-22T03:02:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9cb98f15-aaae-474e-a469-3ce65da49fd6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:52464","PortSpecifier":{"PortValue":52464}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9cb98f15-aaae-474e-a469-3ce65da49fd6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-995f8f.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T03:02:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9cb98f15-aaae-474e-a469-3ce65da49fd6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:52464","PortSpecifier":{"PortValue":52464}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784689357,"nanos":89054798},"http":{"id":"9cb98f15-aaae-474e-a469-3ce65da49fd6","method":"POST","headers":{":authority":"e2e-shared-a-995f8f.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:02:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9cb98f15-aaae-474e-a469-3ce65da49fd6","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T03:02:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9cb98f15-aaae-474e-a469-3ce65da49fd6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1b8f5dc6-d648-43b5-a1c0-52422d83042f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6a1776ec-780a-4077-bf07-9fd8a76fea35"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa8b523815bc"]}} {"level":"debug","ts":"2026-07-22T03:02:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9cb98f15-aaae-474e-a469-3ce65da49fd6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa8b523815bc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6a1776ec-780a-4077-bf07-9fd8a76fea35"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1b8f5dc6-d648-43b5-a1c0-52422d83042f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"30dc239e7db8f6679cbce36f1ceb0cd72fb7ecb5337fac0fb59890fcdf9687fd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-995f8f.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:02:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9cb98f15-aaae-474e-a469-3ce65da49fd6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:02:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9cb98f15-aaae-474e-a469-3ce65da49fd6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:02:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9cb98f15-aaae-474e-a469-3ce65da49fd6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-995f8f/auth-test-model-995f8f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-995f8f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:02:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9cb98f15-aaae-474e-a469-3ce65da49fd6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T03:02:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9cb98f15-aaae-474e-a469-3ce65da49fd6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T03:02:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9cb98f15-aaae-474e-a469-3ce65da49fd6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-22T03:02:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9cb98f15-aaae-474e-a469-3ce65da49fd6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T03:02:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9cb98f15-aaae-474e-a469-3ce65da49fd6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T03:02:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b607313f-ac9e-4e90-9a2f-63e8e74b8d9b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:51556","PortSpecifier":{"PortValue":51556}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b607313f-ac9e-4e90-9a2f-63e8e74b8d9b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-bb8c9d.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T03:02:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b607313f-ac9e-4e90-9a2f-63e8e74b8d9b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:51556","PortSpecifier":{"PortValue":51556}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784689357,"nanos":148346750},"http":{"id":"b607313f-ac9e-4e90-9a2f-63e8e74b8d9b","method":"POST","headers":{":authority":"e2e-shared-b-bb8c9d.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:02:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b607313f-ac9e-4e90-9a2f-63e8e74b8d9b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T03:02:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b607313f-ac9e-4e90-9a2f-63e8e74b8d9b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1b8f5dc6-d648-43b5-a1c0-52422d83042f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6a1776ec-780a-4077-bf07-9fd8a76fea35"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa8b523815bc"]}} {"level":"debug","ts":"2026-07-22T03:02:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b607313f-ac9e-4e90-9a2f-63e8e74b8d9b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa8b523815bc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6a1776ec-780a-4077-bf07-9fd8a76fea35"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1b8f5dc6-d648-43b5-a1c0-52422d83042f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-bb8c9d.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:02:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b607313f-ac9e-4e90-9a2f-63e8e74b8d9b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:02:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b607313f-ac9e-4e90-9a2f-63e8e74b8d9b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:02:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b607313f-ac9e-4e90-9a2f-63e8e74b8d9b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-bb8c9d/auth-test-model-bb8c9d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-bb8c9d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:02:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b607313f-ac9e-4e90-9a2f-63e8e74b8d9b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T03:02:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b607313f-ac9e-4e90-9a2f-63e8e74b8d9b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T03:02:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b607313f-ac9e-4e90-9a2f-63e8e74b8d9b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T03:02:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b607313f-ac9e-4e90-9a2f-63e8e74b8d9b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T03:02:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b607313f-ac9e-4e90-9a2f-63e8e74b8d9b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T03:02:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"acbb3ad7-86f0-4ae0-b341-d0bb6269fa2e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:52470","PortSpecifier":{"PortValue":52470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"acbb3ad7-86f0-4ae0-b341-d0bb6269fa2e","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-995f8f.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T03:02:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"acbb3ad7-86f0-4ae0-b341-d0bb6269fa2e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:52470","PortSpecifier":{"PortValue":52470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784689357,"nanos":184410670},"http":{"id":"acbb3ad7-86f0-4ae0-b341-d0bb6269fa2e","method":"POST","headers":{":authority":"e2e-shared-a-995f8f.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:02:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"acbb3ad7-86f0-4ae0-b341-d0bb6269fa2e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T03:02:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"acbb3ad7-86f0-4ae0-b341-d0bb6269fa2e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1b8f5dc6-d648-43b5-a1c0-52422d83042f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6a1776ec-780a-4077-bf07-9fd8a76fea35"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa8b523815bc"]}} {"level":"debug","ts":"2026-07-22T03:02:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"acbb3ad7-86f0-4ae0-b341-d0bb6269fa2e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa8b523815bc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6a1776ec-780a-4077-bf07-9fd8a76fea35"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1b8f5dc6-d648-43b5-a1c0-52422d83042f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"30dc239e7db8f6679cbce36f1ceb0cd72fb7ecb5337fac0fb59890fcdf9687fd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-995f8f.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:02:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"acbb3ad7-86f0-4ae0-b341-d0bb6269fa2e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:02:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"acbb3ad7-86f0-4ae0-b341-d0bb6269fa2e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:02:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"acbb3ad7-86f0-4ae0-b341-d0bb6269fa2e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-995f8f/auth-test-model-995f8f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-995f8f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:02:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"acbb3ad7-86f0-4ae0-b341-d0bb6269fa2e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T03:02:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"acbb3ad7-86f0-4ae0-b341-d0bb6269fa2e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T03:02:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"acbb3ad7-86f0-4ae0-b341-d0bb6269fa2e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-22T03:02:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"acbb3ad7-86f0-4ae0-b341-d0bb6269fa2e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T03:02:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"acbb3ad7-86f0-4ae0-b341-d0bb6269fa2e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T03:02:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3602cda7-47f1-47e5-b4e9-4b5bd91b9353","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:51572","PortSpecifier":{"PortValue":51572}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3602cda7-47f1-47e5-b4e9-4b5bd91b9353","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-bb8c9d.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T03:02:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3602cda7-47f1-47e5-b4e9-4b5bd91b9353","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:51572","PortSpecifier":{"PortValue":51572}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784689357,"nanos":222629260},"http":{"id":"3602cda7-47f1-47e5-b4e9-4b5bd91b9353","method":"POST","headers":{":authority":"e2e-shared-b-bb8c9d.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:02:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3602cda7-47f1-47e5-b4e9-4b5bd91b9353","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T03:02:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3602cda7-47f1-47e5-b4e9-4b5bd91b9353","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1b8f5dc6-d648-43b5-a1c0-52422d83042f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6a1776ec-780a-4077-bf07-9fd8a76fea35"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa8b523815bc"]}} {"level":"debug","ts":"2026-07-22T03:02:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3602cda7-47f1-47e5-b4e9-4b5bd91b9353","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa8b523815bc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6a1776ec-780a-4077-bf07-9fd8a76fea35"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1b8f5dc6-d648-43b5-a1c0-52422d83042f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-bb8c9d.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:02:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3602cda7-47f1-47e5-b4e9-4b5bd91b9353","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:02:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3602cda7-47f1-47e5-b4e9-4b5bd91b9353","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:02:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3602cda7-47f1-47e5-b4e9-4b5bd91b9353","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-bb8c9d/auth-test-model-bb8c9d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-bb8c9d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:02:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3602cda7-47f1-47e5-b4e9-4b5bd91b9353","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T03:02:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3602cda7-47f1-47e5-b4e9-4b5bd91b9353","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T03:02:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3602cda7-47f1-47e5-b4e9-4b5bd91b9353","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T03:02:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3602cda7-47f1-47e5-b4e9-4b5bd91b9353","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T03:02:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3602cda7-47f1-47e5-b4e9-4b5bd91b9353","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T03:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/66ca44d70c6c701b8c78b4c350f3d02ecaeec1d20ba383aa6c94763833e89c93"} {"level":"info","ts":"2026-07-22T03:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd"} {"level":"info","ts":"2026-07-22T03:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101"} {"level":"info","ts":"2026-07-22T03:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5211a47ea5360d2f06bfaecc4c229dae3fe4241463847177e4978d963b18e795"} {"level":"info","ts":"2026-07-22T03:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac"} {"level":"info","ts":"2026-07-22T03:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782"} {"level":"info","ts":"2026-07-22T03:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794"} {"level":"info","ts":"2026-07-22T03:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/83a12d30a81f1388747732e84d4e50f890a9874696923955190bbc43059911ae"} {"level":"info","ts":"2026-07-22T03:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392"} {"level":"info","ts":"2026-07-22T03:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/408137e4440abdaba6a4c1072d0c76db0c6f4d3565fd0687a2122902af8bce59"} {"level":"info","ts":"2026-07-22T03:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/717580a485fbb6b144146d5a2fb34c186925a79cf940abc46668f9aaf54c4bed"} {"level":"info","ts":"2026-07-22T03:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8bf1795814160890474789dfff655fe728eb6216dd5b2057d4bdbad9a4de6806"} {"level":"debug","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:02:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:02:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782"} {"level":"debug","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782"} {"level":"debug","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:02:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:02:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:02:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:02:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bf1795814160890474789dfff655fe728eb6216dd5b2057d4bdbad9a4de6806","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:02:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:02:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bf1795814160890474789dfff655fe728eb6216dd5b2057d4bdbad9a4de6806","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bf1795814160890474789dfff655fe728eb6216dd5b2057d4bdbad9a4de6806","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782"} {"level":"debug","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bf1795814160890474789dfff655fe728eb6216dd5b2057d4bdbad9a4de6806","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:02:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:02:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bf1795814160890474789dfff655fe728eb6216dd5b2057d4bdbad9a4de6806","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:02:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:02:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bf1795814160890474789dfff655fe728eb6216dd5b2057d4bdbad9a4de6806"} {"level":"info","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bf1795814160890474789dfff655fe728eb6216dd5b2057d4bdbad9a4de6806","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:02:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:02:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8bf1795814160890474789dfff655fe728eb6216dd5b2057d4bdbad9a4de6806"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782"} {"level":"info","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bf1795814160890474789dfff655fe728eb6216dd5b2057d4bdbad9a4de6806","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bf1795814160890474789dfff655fe728eb6216dd5b2057d4bdbad9a4de6806","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bf1795814160890474789dfff655fe728eb6216dd5b2057d4bdbad9a4de6806","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:02:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:02:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bf1795814160890474789dfff655fe728eb6216dd5b2057d4bdbad9a4de6806","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bf1795814160890474789dfff655fe728eb6216dd5b2057d4bdbad9a4de6806","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:02:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:02:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bf1795814160890474789dfff655fe728eb6216dd5b2057d4bdbad9a4de6806"} {"level":"error","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8bf1795814160890474789dfff655fe728eb6216dd5b2057d4bdbad9a4de6806","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8bf1795814160890474789dfff655fe728eb6216dd5b2057d4bdbad9a4de6806\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bf1795814160890474789dfff655fe728eb6216dd5b2057d4bdbad9a4de6806","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:02:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:02:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8bf1795814160890474789dfff655fe728eb6216dd5b2057d4bdbad9a4de6806"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bf1795814160890474789dfff655fe728eb6216dd5b2057d4bdbad9a4de6806","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:02:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:02:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782"} {"level":"info","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bf1795814160890474789dfff655fe728eb6216dd5b2057d4bdbad9a4de6806","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:02:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:02:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bf1795814160890474789dfff655fe728eb6216dd5b2057d4bdbad9a4de6806","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:02:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:02:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bf1795814160890474789dfff655fe728eb6216dd5b2057d4bdbad9a4de6806"} {"level":"info","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:02:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:02:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd"} {"level":"info","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bf1795814160890474789dfff655fe728eb6216dd5b2057d4bdbad9a4de6806","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:02:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:02:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8bf1795814160890474789dfff655fe728eb6216dd5b2057d4bdbad9a4de6806"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bf1795814160890474789dfff655fe728eb6216dd5b2057d4bdbad9a4de6806","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:02:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:02:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794"} {"level":"info","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:02:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:02:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bf1795814160890474789dfff655fe728eb6216dd5b2057d4bdbad9a4de6806"} {"level":"info","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bf1795814160890474789dfff655fe728eb6216dd5b2057d4bdbad9a4de6806","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:02:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:02:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:02:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:02:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd"} {"level":"info","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5211a47ea5360d2f06bfaecc4c229dae3fe4241463847177e4978d963b18e795","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:02:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:02:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794"} {"level":"info","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5211a47ea5360d2f06bfaecc4c229dae3fe4241463847177e4978d963b18e795","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:02:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:02:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5211a47ea5360d2f06bfaecc4c229dae3fe4241463847177e4978d963b18e795","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:02:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:02:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5211a47ea5360d2f06bfaecc4c229dae3fe4241463847177e4978d963b18e795"} {"level":"info","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5211a47ea5360d2f06bfaecc4c229dae3fe4241463847177e4978d963b18e795","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:02:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:02:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd"} {"level":"info","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5211a47ea5360d2f06bfaecc4c229dae3fe4241463847177e4978d963b18e795","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:02:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:02:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"717580a485fbb6b144146d5a2fb34c186925a79cf940abc46668f9aaf54c4bed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:02:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:02:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5211a47ea5360d2f06bfaecc4c229dae3fe4241463847177e4978d963b18e795"} {"level":"info","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"717580a485fbb6b144146d5a2fb34c186925a79cf940abc46668f9aaf54c4bed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:02:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:02:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd"} {"level":"info","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5211a47ea5360d2f06bfaecc4c229dae3fe4241463847177e4978d963b18e795","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:02:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:02:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5211a47ea5360d2f06bfaecc4c229dae3fe4241463847177e4978d963b18e795"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/717580a485fbb6b144146d5a2fb34c186925a79cf940abc46668f9aaf54c4bed"} {"level":"info","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5211a47ea5360d2f06bfaecc4c229dae3fe4241463847177e4978d963b18e795","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"717580a485fbb6b144146d5a2fb34c186925a79cf940abc46668f9aaf54c4bed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:02:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:02:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["717580a485fbb6b144146d5a2fb34c186925a79cf940abc46668f9aaf54c4bed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"717580a485fbb6b144146d5a2fb34c186925a79cf940abc46668f9aaf54c4bed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5211a47ea5360d2f06bfaecc4c229dae3fe4241463847177e4978d963b18e795","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"717580a485fbb6b144146d5a2fb34c186925a79cf940abc46668f9aaf54c4bed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd"} {"level":"debug","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:02:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:02:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5211a47ea5360d2f06bfaecc4c229dae3fe4241463847177e4978d963b18e795"} {"level":"info","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/717580a485fbb6b144146d5a2fb34c186925a79cf940abc46668f9aaf54c4bed"} {"level":"info","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd"} {"level":"debug","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:02:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:02:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:02:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:02:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac"} {"level":"info","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:02:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:02:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101"} {"level":"info","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:02:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:02:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:02:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:02:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac"} {"level":"info","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:02:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:02:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:02:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:02:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83a12d30a81f1388747732e84d4e50f890a9874696923955190bbc43059911ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:02:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:02:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83a12d30a81f1388747732e84d4e50f890a9874696923955190bbc43059911ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83a12d30a81f1388747732e84d4e50f890a9874696923955190bbc43059911ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83a12d30a81f1388747732e84d4e50f890a9874696923955190bbc43059911ae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101"} {"level":"debug","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:02:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:02:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83a12d30a81f1388747732e84d4e50f890a9874696923955190bbc43059911ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac"} {"level":"info","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83a12d30a81f1388747732e84d4e50f890a9874696923955190bbc43059911ae"} {"level":"debug","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83a12d30a81f1388747732e84d4e50f890a9874696923955190bbc43059911ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:02:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:02:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83a12d30a81f1388747732e84d4e50f890a9874696923955190bbc43059911ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101"} {"level":"info","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83a12d30a81f1388747732e84d4e50f890a9874696923955190bbc43059911ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83a12d30a81f1388747732e84d4e50f890a9874696923955190bbc43059911ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:02:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:02:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83a12d30a81f1388747732e84d4e50f890a9874696923955190bbc43059911ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83a12d30a81f1388747732e84d4e50f890a9874696923955190bbc43059911ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83a12d30a81f1388747732e84d4e50f890a9874696923955190bbc43059911ae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83a12d30a81f1388747732e84d4e50f890a9874696923955190bbc43059911ae"} {"level":"debug","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83a12d30a81f1388747732e84d4e50f890a9874696923955190bbc43059911ae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83a12d30a81f1388747732e84d4e50f890a9874696923955190bbc43059911ae"} {"level":"debug","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83a12d30a81f1388747732e84d4e50f890a9874696923955190bbc43059911ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:02:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:02:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83a12d30a81f1388747732e84d4e50f890a9874696923955190bbc43059911ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83a12d30a81f1388747732e84d4e50f890a9874696923955190bbc43059911ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"408137e4440abdaba6a4c1072d0c76db0c6f4d3565fd0687a2122902af8bce59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:02:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:02:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"408137e4440abdaba6a4c1072d0c76db0c6f4d3565fd0687a2122902af8bce59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83a12d30a81f1388747732e84d4e50f890a9874696923955190bbc43059911ae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/408137e4440abdaba6a4c1072d0c76db0c6f4d3565fd0687a2122902af8bce59"} {"level":"debug","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"408137e4440abdaba6a4c1072d0c76db0c6f4d3565fd0687a2122902af8bce59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:02:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:02:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["408137e4440abdaba6a4c1072d0c76db0c6f4d3565fd0687a2122902af8bce59"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"408137e4440abdaba6a4c1072d0c76db0c6f4d3565fd0687a2122902af8bce59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"408137e4440abdaba6a4c1072d0c76db0c6f4d3565fd0687a2122902af8bce59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:02:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:02:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["408137e4440abdaba6a4c1072d0c76db0c6f4d3565fd0687a2122902af8bce59"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"408137e4440abdaba6a4c1072d0c76db0c6f4d3565fd0687a2122902af8bce59","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"408137e4440abdaba6a4c1072d0c76db0c6f4d3565fd0687a2122902af8bce59\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"408137e4440abdaba6a4c1072d0c76db0c6f4d3565fd0687a2122902af8bce59","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83a12d30a81f1388747732e84d4e50f890a9874696923955190bbc43059911ae"} {"level":"debug","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"408137e4440abdaba6a4c1072d0c76db0c6f4d3565fd0687a2122902af8bce59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:02:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:02:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"408137e4440abdaba6a4c1072d0c76db0c6f4d3565fd0687a2122902af8bce59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"408137e4440abdaba6a4c1072d0c76db0c6f4d3565fd0687a2122902af8bce59","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/408137e4440abdaba6a4c1072d0c76db0c6f4d3565fd0687a2122902af8bce59"} {"level":"debug","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"408137e4440abdaba6a4c1072d0c76db0c6f4d3565fd0687a2122902af8bce59","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/408137e4440abdaba6a4c1072d0c76db0c6f4d3565fd0687a2122902af8bce59"} {"level":"debug","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"408137e4440abdaba6a4c1072d0c76db0c6f4d3565fd0687a2122902af8bce59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:02:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:02:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["408137e4440abdaba6a4c1072d0c76db0c6f4d3565fd0687a2122902af8bce59"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"408137e4440abdaba6a4c1072d0c76db0c6f4d3565fd0687a2122902af8bce59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"408137e4440abdaba6a4c1072d0c76db0c6f4d3565fd0687a2122902af8bce59","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/408137e4440abdaba6a4c1072d0c76db0c6f4d3565fd0687a2122902af8bce59"} {"level":"debug","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66ca44d70c6c701b8c78b4c350f3d02ecaeec1d20ba383aa6c94763833e89c93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:02:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:02:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66ca44d70c6c701b8c78b4c350f3d02ecaeec1d20ba383aa6c94763833e89c93","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66ca44d70c6c701b8c78b4c350f3d02ecaeec1d20ba383aa6c94763833e89c93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:02:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:02:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66ca44d70c6c701b8c78b4c350f3d02ecaeec1d20ba383aa6c94763833e89c93"} {"level":"info","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66ca44d70c6c701b8c78b4c350f3d02ecaeec1d20ba383aa6c94763833e89c93","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66ca44d70c6c701b8c78b4c350f3d02ecaeec1d20ba383aa6c94763833e89c93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:02:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:02:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"66ca44d70c6c701b8c78b4c350f3d02ecaeec1d20ba383aa6c94763833e89c93","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"66ca44d70c6c701b8c78b4c350f3d02ecaeec1d20ba383aa6c94763833e89c93\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66ca44d70c6c701b8c78b4c350f3d02ecaeec1d20ba383aa6c94763833e89c93","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66ca44d70c6c701b8c78b4c350f3d02ecaeec1d20ba383aa6c94763833e89c93","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66ca44d70c6c701b8c78b4c350f3d02ecaeec1d20ba383aa6c94763833e89c93"} {"level":"info","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66ca44d70c6c701b8c78b4c350f3d02ecaeec1d20ba383aa6c94763833e89c93"} {"level":"debug","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:02:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:02:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66ca44d70c6c701b8c78b4c350f3d02ecaeec1d20ba383aa6c94763833e89c93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:02:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:02:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66ca44d70c6c701b8c78b4c350f3d02ecaeec1d20ba383aa6c94763833e89c93"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392"} {"level":"info","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66ca44d70c6c701b8c78b4c350f3d02ecaeec1d20ba383aa6c94763833e89c93","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66ca44d70c6c701b8c78b4c350f3d02ecaeec1d20ba383aa6c94763833e89c93","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392"} {"level":"debug","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:02:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:02:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66ca44d70c6c701b8c78b4c350f3d02ecaeec1d20ba383aa6c94763833e89c93"} {"level":"info","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:02:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392"} {"level":"info","ts":"2026-07-22T03:02:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e8e2a83b-483b-492f-a15d-a96b3db1b3bd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50008","PortSpecifier":{"PortValue":50008}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e8e2a83b-483b-492f-a15d-a96b3db1b3bd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-995f8f.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T03:02:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e8e2a83b-483b-492f-a15d-a96b3db1b3bd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50008","PortSpecifier":{"PortValue":50008}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784689374,"nanos":310481342},"http":{"id":"e8e2a83b-483b-492f-a15d-a96b3db1b3bd","method":"POST","headers":{":authority":"e2e-shared-a-995f8f.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:02:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e8e2a83b-483b-492f-a15d-a96b3db1b3bd","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T03:02:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e8e2a83b-483b-492f-a15d-a96b3db1b3bd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1b8f5dc6-d648-43b5-a1c0-52422d83042f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6a1776ec-780a-4077-bf07-9fd8a76fea35"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa8b523815bc"]}} {"level":"debug","ts":"2026-07-22T03:02:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e8e2a83b-483b-492f-a15d-a96b3db1b3bd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa8b523815bc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6a1776ec-780a-4077-bf07-9fd8a76fea35"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1b8f5dc6-d648-43b5-a1c0-52422d83042f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"30dc239e7db8f6679cbce36f1ceb0cd72fb7ecb5337fac0fb59890fcdf9687fd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-995f8f.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:02:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e8e2a83b-483b-492f-a15d-a96b3db1b3bd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:02:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e8e2a83b-483b-492f-a15d-a96b3db1b3bd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:02:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e8e2a83b-483b-492f-a15d-a96b3db1b3bd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-995f8f/auth-test-model-995f8f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-995f8f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:02:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e8e2a83b-483b-492f-a15d-a96b3db1b3bd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T03:02:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e8e2a83b-483b-492f-a15d-a96b3db1b3bd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T03:02:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e8e2a83b-483b-492f-a15d-a96b3db1b3bd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T03:02:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e8e2a83b-483b-492f-a15d-a96b3db1b3bd","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T03:02:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e8e2a83b-483b-492f-a15d-a96b3db1b3bd","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T03:02:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d4459fc6-dd98-46a8-a7f1-0c69b49d4f5b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:59248","PortSpecifier":{"PortValue":59248}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d4459fc6-dd98-46a8-a7f1-0c69b49d4f5b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-bb8c9d.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T03:02:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d4459fc6-dd98-46a8-a7f1-0c69b49d4f5b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:59248","PortSpecifier":{"PortValue":59248}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784689374,"nanos":355968338},"http":{"id":"d4459fc6-dd98-46a8-a7f1-0c69b49d4f5b","method":"POST","headers":{":authority":"e2e-shared-b-bb8c9d.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:02:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d4459fc6-dd98-46a8-a7f1-0c69b49d4f5b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T03:02:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d4459fc6-dd98-46a8-a7f1-0c69b49d4f5b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1b8f5dc6-d648-43b5-a1c0-52422d83042f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6a1776ec-780a-4077-bf07-9fd8a76fea35"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa8b523815bc"]}} {"level":"debug","ts":"2026-07-22T03:02:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d4459fc6-dd98-46a8-a7f1-0c69b49d4f5b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa8b523815bc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6a1776ec-780a-4077-bf07-9fd8a76fea35"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1b8f5dc6-d648-43b5-a1c0-52422d83042f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-bb8c9d.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:02:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d4459fc6-dd98-46a8-a7f1-0c69b49d4f5b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:02:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d4459fc6-dd98-46a8-a7f1-0c69b49d4f5b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:02:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d4459fc6-dd98-46a8-a7f1-0c69b49d4f5b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-bb8c9d/auth-test-model-bb8c9d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-bb8c9d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:02:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d4459fc6-dd98-46a8-a7f1-0c69b49d4f5b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T03:02:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d4459fc6-dd98-46a8-a7f1-0c69b49d4f5b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T03:02:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d4459fc6-dd98-46a8-a7f1-0c69b49d4f5b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T03:02:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d4459fc6-dd98-46a8-a7f1-0c69b49d4f5b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T03:02:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d4459fc6-dd98-46a8-a7f1-0c69b49d4f5b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T03:02:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d90ff198-8e12-4905-8433-0698e77fc111","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:59256","PortSpecifier":{"PortValue":59256}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d90ff198-8e12-4905-8433-0698e77fc111","method":"GET","path":"/maas-api/v1/api-keys/023c0fa2-4de5-4c54-8dd4-98f2cc3908d0","host":"e2e-shared-b-bb8c9d.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T03:02:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d90ff198-8e12-4905-8433-0698e77fc111","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:59256","PortSpecifier":{"PortValue":59256}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784689374,"nanos":397032583},"http":{"id":"d90ff198-8e12-4905-8433-0698e77fc111","method":"GET","headers":{":authority":"e2e-shared-b-bb8c9d.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/023c0fa2-4de5-4c54-8dd4-98f2cc3908d0",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:02:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d90ff198-8e12-4905-8433-0698e77fc111","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T03:02:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d90ff198-8e12-4905-8433-0698e77fc111","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1b8f5dc6-d648-43b5-a1c0-52422d83042f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6a1776ec-780a-4077-bf07-9fd8a76fea35"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa8b523815bc"]}} {"level":"debug","ts":"2026-07-22T03:02:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d90ff198-8e12-4905-8433-0698e77fc111","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa8b523815bc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6a1776ec-780a-4077-bf07-9fd8a76fea35"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1b8f5dc6-d648-43b5-a1c0-52422d83042f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-bb8c9d.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/023c0fa2-4de5-4c54-8dd4-98f2cc3908d0",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:02:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d90ff198-8e12-4905-8433-0698e77fc111","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:02:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d90ff198-8e12-4905-8433-0698e77fc111","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:02:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d90ff198-8e12-4905-8433-0698e77fc111","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-bb8c9d/auth-test-model-bb8c9d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-bb8c9d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:02:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d90ff198-8e12-4905-8433-0698e77fc111","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T03:02:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d90ff198-8e12-4905-8433-0698e77fc111","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T03:02:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d90ff198-8e12-4905-8433-0698e77fc111","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T03:02:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d90ff198-8e12-4905-8433-0698e77fc111","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T03:02:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d90ff198-8e12-4905-8433-0698e77fc111","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T03:02:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bfb14c7a-a4ce-4f30-9675-220528529042","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50018","PortSpecifier":{"PortValue":50018}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bfb14c7a-a4ce-4f30-9675-220528529042","method":"GET","path":"/maas-api/v1/api-keys/023c0fa2-4de5-4c54-8dd4-98f2cc3908d0","host":"e2e-shared-a-995f8f.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T03:02:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bfb14c7a-a4ce-4f30-9675-220528529042","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50018","PortSpecifier":{"PortValue":50018}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784689374,"nanos":431171213},"http":{"id":"bfb14c7a-a4ce-4f30-9675-220528529042","method":"GET","headers":{":authority":"e2e-shared-a-995f8f.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/023c0fa2-4de5-4c54-8dd4-98f2cc3908d0",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:02:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bfb14c7a-a4ce-4f30-9675-220528529042","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T03:02:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bfb14c7a-a4ce-4f30-9675-220528529042","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1b8f5dc6-d648-43b5-a1c0-52422d83042f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6a1776ec-780a-4077-bf07-9fd8a76fea35"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa8b523815bc"]}} {"level":"debug","ts":"2026-07-22T03:02:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bfb14c7a-a4ce-4f30-9675-220528529042","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa8b523815bc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6a1776ec-780a-4077-bf07-9fd8a76fea35"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1b8f5dc6-d648-43b5-a1c0-52422d83042f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"30dc239e7db8f6679cbce36f1ceb0cd72fb7ecb5337fac0fb59890fcdf9687fd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-995f8f.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/023c0fa2-4de5-4c54-8dd4-98f2cc3908d0",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:02:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bfb14c7a-a4ce-4f30-9675-220528529042","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:02:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bfb14c7a-a4ce-4f30-9675-220528529042","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:02:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bfb14c7a-a4ce-4f30-9675-220528529042","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-995f8f/auth-test-model-995f8f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-995f8f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:02:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bfb14c7a-a4ce-4f30-9675-220528529042","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T03:02:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bfb14c7a-a4ce-4f30-9675-220528529042","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T03:02:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bfb14c7a-a4ce-4f30-9675-220528529042","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-22T03:02:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bfb14c7a-a4ce-4f30-9675-220528529042","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T03:02:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bfb14c7a-a4ce-4f30-9675-220528529042","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T03:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/66ca44d70c6c701b8c78b4c350f3d02ecaeec1d20ba383aa6c94763833e89c93"} {"level":"info","ts":"2026-07-22T03:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101"} {"level":"info","ts":"2026-07-22T03:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5211a47ea5360d2f06bfaecc4c229dae3fe4241463847177e4978d963b18e795"} {"level":"info","ts":"2026-07-22T03:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782"} {"level":"info","ts":"2026-07-22T03:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/83a12d30a81f1388747732e84d4e50f890a9874696923955190bbc43059911ae"} {"level":"info","ts":"2026-07-22T03:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac"} {"level":"info","ts":"2026-07-22T03:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/717580a485fbb6b144146d5a2fb34c186925a79cf940abc46668f9aaf54c4bed"} {"level":"info","ts":"2026-07-22T03:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd"} {"level":"info","ts":"2026-07-22T03:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794"} {"level":"info","ts":"2026-07-22T03:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8bf1795814160890474789dfff655fe728eb6216dd5b2057d4bdbad9a4de6806"} {"level":"info","ts":"2026-07-22T03:03:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392"} {"level":"info","ts":"2026-07-22T03:03:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/408137e4440abdaba6a4c1072d0c76db0c6f4d3565fd0687a2122902af8bce59"} {"level":"debug","ts":"2026-07-22T03:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83a12d30a81f1388747732e84d4e50f890a9874696923955190bbc43059911ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:03:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:03:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83a12d30a81f1388747732e84d4e50f890a9874696923955190bbc43059911ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83a12d30a81f1388747732e84d4e50f890a9874696923955190bbc43059911ae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83a12d30a81f1388747732e84d4e50f890a9874696923955190bbc43059911ae"} {"level":"debug","ts":"2026-07-22T03:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83a12d30a81f1388747732e84d4e50f890a9874696923955190bbc43059911ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83a12d30a81f1388747732e84d4e50f890a9874696923955190bbc43059911ae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83a12d30a81f1388747732e84d4e50f890a9874696923955190bbc43059911ae"} {"level":"debug","ts":"2026-07-22T03:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83a12d30a81f1388747732e84d4e50f890a9874696923955190bbc43059911ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:03:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:03:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83a12d30a81f1388747732e84d4e50f890a9874696923955190bbc43059911ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83a12d30a81f1388747732e84d4e50f890a9874696923955190bbc43059911ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83a12d30a81f1388747732e84d4e50f890a9874696923955190bbc43059911ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:03:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:03:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83a12d30a81f1388747732e84d4e50f890a9874696923955190bbc43059911ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83a12d30a81f1388747732e84d4e50f890a9874696923955190bbc43059911ae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83a12d30a81f1388747732e84d4e50f890a9874696923955190bbc43059911ae"} {"level":"debug","ts":"2026-07-22T03:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83a12d30a81f1388747732e84d4e50f890a9874696923955190bbc43059911ae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83a12d30a81f1388747732e84d4e50f890a9874696923955190bbc43059911ae"} {"level":"debug","ts":"2026-07-22T03:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83a12d30a81f1388747732e84d4e50f890a9874696923955190bbc43059911ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:03:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:03:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83a12d30a81f1388747732e84d4e50f890a9874696923955190bbc43059911ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83a12d30a81f1388747732e84d4e50f890a9874696923955190bbc43059911ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83a12d30a81f1388747732e84d4e50f890a9874696923955190bbc43059911ae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83a12d30a81f1388747732e84d4e50f890a9874696923955190bbc43059911ae"} {"level":"debug","ts":"2026-07-22T03:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"408137e4440abdaba6a4c1072d0c76db0c6f4d3565fd0687a2122902af8bce59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:03:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:03:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"408137e4440abdaba6a4c1072d0c76db0c6f4d3565fd0687a2122902af8bce59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"408137e4440abdaba6a4c1072d0c76db0c6f4d3565fd0687a2122902af8bce59","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/408137e4440abdaba6a4c1072d0c76db0c6f4d3565fd0687a2122902af8bce59"} {"level":"debug","ts":"2026-07-22T03:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"408137e4440abdaba6a4c1072d0c76db0c6f4d3565fd0687a2122902af8bce59","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/408137e4440abdaba6a4c1072d0c76db0c6f4d3565fd0687a2122902af8bce59"} {"level":"debug","ts":"2026-07-22T03:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"408137e4440abdaba6a4c1072d0c76db0c6f4d3565fd0687a2122902af8bce59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:03:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:03:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["408137e4440abdaba6a4c1072d0c76db0c6f4d3565fd0687a2122902af8bce59"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"408137e4440abdaba6a4c1072d0c76db0c6f4d3565fd0687a2122902af8bce59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"408137e4440abdaba6a4c1072d0c76db0c6f4d3565fd0687a2122902af8bce59","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/408137e4440abdaba6a4c1072d0c76db0c6f4d3565fd0687a2122902af8bce59"} {"level":"debug","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5211a47ea5360d2f06bfaecc4c229dae3fe4241463847177e4978d963b18e795","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:03:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:03:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5211a47ea5360d2f06bfaecc4c229dae3fe4241463847177e4978d963b18e795","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5211a47ea5360d2f06bfaecc4c229dae3fe4241463847177e4978d963b18e795","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5211a47ea5360d2f06bfaecc4c229dae3fe4241463847177e4978d963b18e795","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5211a47ea5360d2f06bfaecc4c229dae3fe4241463847177e4978d963b18e795"} {"level":"debug","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5211a47ea5360d2f06bfaecc4c229dae3fe4241463847177e4978d963b18e795","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5211a47ea5360d2f06bfaecc4c229dae3fe4241463847177e4978d963b18e795"} {"level":"debug","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5211a47ea5360d2f06bfaecc4c229dae3fe4241463847177e4978d963b18e795","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:03:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:03:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5211a47ea5360d2f06bfaecc4c229dae3fe4241463847177e4978d963b18e795"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5211a47ea5360d2f06bfaecc4c229dae3fe4241463847177e4978d963b18e795","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:03:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:03:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5211a47ea5360d2f06bfaecc4c229dae3fe4241463847177e4978d963b18e795","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66ca44d70c6c701b8c78b4c350f3d02ecaeec1d20ba383aa6c94763833e89c93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:03:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:03:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794"} {"level":"info","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66ca44d70c6c701b8c78b4c350f3d02ecaeec1d20ba383aa6c94763833e89c93","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:03:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:03:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5211a47ea5360d2f06bfaecc4c229dae3fe4241463847177e4978d963b18e795"} {"level":"info","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66ca44d70c6c701b8c78b4c350f3d02ecaeec1d20ba383aa6c94763833e89c93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:03:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:03:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66ca44d70c6c701b8c78b4c350f3d02ecaeec1d20ba383aa6c94763833e89c93"} {"level":"info","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66ca44d70c6c701b8c78b4c350f3d02ecaeec1d20ba383aa6c94763833e89c93","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:03:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:03:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66ca44d70c6c701b8c78b4c350f3d02ecaeec1d20ba383aa6c94763833e89c93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:03:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:03:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66ca44d70c6c701b8c78b4c350f3d02ecaeec1d20ba383aa6c94763833e89c93"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794"} {"level":"info","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66ca44d70c6c701b8c78b4c350f3d02ecaeec1d20ba383aa6c94763833e89c93","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:03:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:03:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66ca44d70c6c701b8c78b4c350f3d02ecaeec1d20ba383aa6c94763833e89c93"} {"level":"info","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66ca44d70c6c701b8c78b4c350f3d02ecaeec1d20ba383aa6c94763833e89c93","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:03:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:03:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794"} {"level":"info","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:03:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:03:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66ca44d70c6c701b8c78b4c350f3d02ecaeec1d20ba383aa6c94763833e89c93"} {"level":"info","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794"} {"level":"info","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:03:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:03:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794"} {"level":"info","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:03:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:03:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794"} {"level":"info","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bf1795814160890474789dfff655fe728eb6216dd5b2057d4bdbad9a4de6806"} {"level":"info","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bf1795814160890474789dfff655fe728eb6216dd5b2057d4bdbad9a4de6806","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:03:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:03:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8bf1795814160890474789dfff655fe728eb6216dd5b2057d4bdbad9a4de6806"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794"} {"level":"info","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bf1795814160890474789dfff655fe728eb6216dd5b2057d4bdbad9a4de6806","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bf1795814160890474789dfff655fe728eb6216dd5b2057d4bdbad9a4de6806","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bf1795814160890474789dfff655fe728eb6216dd5b2057d4bdbad9a4de6806"} {"level":"debug","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:03:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:03:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392"} {"level":"debug","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392"} {"level":"debug","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:03:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:03:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:03:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:03:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:03:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:03:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392"} {"level":"info","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:03:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:03:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd"} {"level":"info","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:03:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:03:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:03:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:03:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392"} {"level":"info","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:03:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:03:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd"} {"level":"info","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:03:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:03:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392"} {"level":"info","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:03:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:03:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:03:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:03:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd"} {"level":"info","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:03:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:03:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101"} {"level":"info","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:03:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:03:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:03:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:03:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392"} {"level":"info","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:03:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:03:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd"} {"level":"debug","ts":"2026-07-22T03:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:03:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:03:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:03:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:03:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101"} {"level":"info","ts":"2026-07-22T03:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:03:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:03:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782"} {"level":"info","ts":"2026-07-22T03:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:03:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:03:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:03:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:03:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101"} {"level":"info","ts":"2026-07-22T03:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:03:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:03:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782"} {"level":"info","ts":"2026-07-22T03:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:03:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:03:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:03:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:03:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101"} {"level":"error","ts":"2026-07-22T03:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T03:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:03:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:03:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:03:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:03:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782"} {"level":"info","ts":"2026-07-22T03:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:03:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:03:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:03:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:03:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac"} {"level":"info","ts":"2026-07-22T03:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"717580a485fbb6b144146d5a2fb34c186925a79cf940abc46668f9aaf54c4bed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:03:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:03:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/717580a485fbb6b144146d5a2fb34c186925a79cf940abc46668f9aaf54c4bed"} {"level":"info","ts":"2026-07-22T03:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"717580a485fbb6b144146d5a2fb34c186925a79cf940abc46668f9aaf54c4bed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:03:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:03:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:03:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:03:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782"} {"level":"info","ts":"2026-07-22T03:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"717580a485fbb6b144146d5a2fb34c186925a79cf940abc46668f9aaf54c4bed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:03:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:03:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["717580a485fbb6b144146d5a2fb34c186925a79cf940abc46668f9aaf54c4bed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac"} {"level":"info","ts":"2026-07-22T03:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"717580a485fbb6b144146d5a2fb34c186925a79cf940abc46668f9aaf54c4bed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:03:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:03:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"717580a485fbb6b144146d5a2fb34c186925a79cf940abc46668f9aaf54c4bed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101"} {"level":"info","ts":"2026-07-22T03:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/717580a485fbb6b144146d5a2fb34c186925a79cf940abc46668f9aaf54c4bed"} {"level":"info","ts":"2026-07-22T03:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782"} {"level":"info","ts":"2026-07-22T03:03:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d5b6dd16-97cf-47f0-b45d-123fb149547f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:54546","PortSpecifier":{"PortValue":54546}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d5b6dd16-97cf-47f0-b45d-123fb149547f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-995f8f.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T03:03:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d5b6dd16-97cf-47f0-b45d-123fb149547f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:54546","PortSpecifier":{"PortValue":54546}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784689389,"nanos":471657037},"http":{"id":"d5b6dd16-97cf-47f0-b45d-123fb149547f","method":"POST","headers":{":authority":"e2e-shared-a-995f8f.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:03:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d5b6dd16-97cf-47f0-b45d-123fb149547f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T03:03:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d5b6dd16-97cf-47f0-b45d-123fb149547f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1b8f5dc6-d648-43b5-a1c0-52422d83042f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6a1776ec-780a-4077-bf07-9fd8a76fea35"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa8b523815bc"]}} {"level":"debug","ts":"2026-07-22T03:03:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d5b6dd16-97cf-47f0-b45d-123fb149547f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa8b523815bc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6a1776ec-780a-4077-bf07-9fd8a76fea35"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1b8f5dc6-d648-43b5-a1c0-52422d83042f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"30dc239e7db8f6679cbce36f1ceb0cd72fb7ecb5337fac0fb59890fcdf9687fd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-995f8f.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:03:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5b6dd16-97cf-47f0-b45d-123fb149547f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:03:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5b6dd16-97cf-47f0-b45d-123fb149547f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:03:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5b6dd16-97cf-47f0-b45d-123fb149547f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-995f8f/auth-test-model-995f8f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-995f8f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:03:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d5b6dd16-97cf-47f0-b45d-123fb149547f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T03:03:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5b6dd16-97cf-47f0-b45d-123fb149547f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T03:03:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5b6dd16-97cf-47f0-b45d-123fb149547f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T03:03:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d5b6dd16-97cf-47f0-b45d-123fb149547f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T03:03:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d5b6dd16-97cf-47f0-b45d-123fb149547f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T03:03:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2139331b-26d3-4c96-940a-f9600fbda777","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:48922","PortSpecifier":{"PortValue":48922}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2139331b-26d3-4c96-940a-f9600fbda777","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-bb8c9d.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T03:03:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2139331b-26d3-4c96-940a-f9600fbda777","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:48922","PortSpecifier":{"PortValue":48922}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784689389,"nanos":508704015},"http":{"id":"2139331b-26d3-4c96-940a-f9600fbda777","method":"POST","headers":{":authority":"e2e-shared-b-bb8c9d.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:03:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2139331b-26d3-4c96-940a-f9600fbda777","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T03:03:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2139331b-26d3-4c96-940a-f9600fbda777","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1b8f5dc6-d648-43b5-a1c0-52422d83042f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6a1776ec-780a-4077-bf07-9fd8a76fea35"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa8b523815bc"]}} {"level":"debug","ts":"2026-07-22T03:03:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2139331b-26d3-4c96-940a-f9600fbda777","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa8b523815bc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6a1776ec-780a-4077-bf07-9fd8a76fea35"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1b8f5dc6-d648-43b5-a1c0-52422d83042f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-bb8c9d.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:03:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2139331b-26d3-4c96-940a-f9600fbda777","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:03:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2139331b-26d3-4c96-940a-f9600fbda777","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:03:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2139331b-26d3-4c96-940a-f9600fbda777","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-bb8c9d/auth-test-model-bb8c9d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-bb8c9d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:03:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2139331b-26d3-4c96-940a-f9600fbda777","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T03:03:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2139331b-26d3-4c96-940a-f9600fbda777","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T03:03:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2139331b-26d3-4c96-940a-f9600fbda777","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-22T03:03:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2139331b-26d3-4c96-940a-f9600fbda777","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T03:03:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2139331b-26d3-4c96-940a-f9600fbda777","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T03:03:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"556a6054-906a-4ba0-97b7-4c1c03e69dc2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:54552","PortSpecifier":{"PortValue":54552}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"556a6054-906a-4ba0-97b7-4c1c03e69dc2","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-995f8f.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T03:03:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"556a6054-906a-4ba0-97b7-4c1c03e69dc2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:54552","PortSpecifier":{"PortValue":54552}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784689389,"nanos":545456280},"http":{"id":"556a6054-906a-4ba0-97b7-4c1c03e69dc2","method":"POST","headers":{":authority":"e2e-shared-a-995f8f.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:03:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"556a6054-906a-4ba0-97b7-4c1c03e69dc2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ZzYQvNEkvnRLe8bz_94bCkVvojg2N6MViI8MMNcVFf5gxZS5085aGq9tRAKj"} {"level":"debug","ts":"2026-07-22T03:03:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"556a6054-906a-4ba0-97b7-4c1c03e69dc2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-995f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ZzYQvNEkvnRLe8bz_94bCkVvojg2N6MViI8MMNcVFf5gxZS5085aGq9tRAKj\"}"} {"level":"debug","ts":"2026-07-22T03:03:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"556a6054-906a-4ba0-97b7-4c1c03e69dc2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-995f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b299c666-3599-4dc4-8ec7-4f42fdae03b3","keyName":"e2e-auth-iso-a-d6f0bf","subscription":"e2e-auth-iso-0c82e0","tenant":"e2e-shared-a-995f8f","userId":"b299c666-3599-4dc4-8ec7-4f42fdae03b3","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T03:03:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"556a6054-906a-4ba0-97b7-4c1c03e69dc2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:03:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"556a6054-906a-4ba0-97b7-4c1c03e69dc2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:03:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"556a6054-906a-4ba0-97b7-4c1c03e69dc2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:03:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"556a6054-906a-4ba0-97b7-4c1c03e69dc2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-995f8f/auth-test-model-995f8f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-995f8f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:03:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"556a6054-906a-4ba0-97b7-4c1c03e69dc2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T03:03:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"556a6054-906a-4ba0-97b7-4c1c03e69dc2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-0c82e0"} {"level":"debug","ts":"2026-07-22T03:03:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"556a6054-906a-4ba0-97b7-4c1c03e69dc2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T03:03:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"556a6054-906a-4ba0-97b7-4c1c03e69dc2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-22T03:03:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"556a6054-906a-4ba0-97b7-4c1c03e69dc2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T03:03:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"556a6054-906a-4ba0-97b7-4c1c03e69dc2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T03:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd"} {"level":"info","ts":"2026-07-22T03:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5211a47ea5360d2f06bfaecc4c229dae3fe4241463847177e4978d963b18e795"} {"level":"info","ts":"2026-07-22T03:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bc31cdb28dad38b4d7e28212e7c416186b344b40558dc6c1d0e6d02be2b5555b"} {"level":"info","ts":"2026-07-22T03:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8f8c40d104d4f8807b980b7620e06a5fb98f2ffb7ebe679d46b3892784b6faa7"} {"level":"info","ts":"2026-07-22T03:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794"} {"level":"info","ts":"2026-07-22T03:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a4bc4d8752d21cdf047314e9bfc7098cc18bf8f317cd07054e0d1aa63fd49b81"} {"level":"info","ts":"2026-07-22T03:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aee3f29791ed1be67ab11b01e76dcec56676c9ce17a7e1cbe6b53973bd5aefc9"} {"level":"info","ts":"2026-07-22T03:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac"} {"level":"info","ts":"2026-07-22T03:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/91753b6da497c9d5438ae65389df2b77a157dc9693d70791d332b6f78c421376"} {"level":"info","ts":"2026-07-22T03:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a71db6da6606dbccbce42960ce023cce158108e081105aa91f2218f4bbba729a"} {"level":"info","ts":"2026-07-22T03:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/316ded174ca111f43725ccdb0bcf25def451c89c0f4efa827a8b24c0364cfab8"} {"level":"info","ts":"2026-07-22T03:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/30dc239e7db8f6679cbce36f1ceb0cd72fb7ecb5337fac0fb59890fcdf9687fd"} {"level":"info","ts":"2026-07-22T03:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/83a12d30a81f1388747732e84d4e50f890a9874696923955190bbc43059911ae"} {"level":"info","ts":"2026-07-22T03:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3db3f65d458d7e63de97b3d305477bebae56f7e5747a369674c6483877ec853d"} {"level":"info","ts":"2026-07-22T03:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b0d1d1805ea5a922a7a9028903072f74982c224ce3d799eadaeda7771dd6d8ea"} {"level":"info","ts":"2026-07-22T03:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5d7299f602df90f3bc5ef9e12ac0fb2c42a886532fa31bd5e084601705895ce7"} {"level":"info","ts":"2026-07-22T03:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3a4889d45753f32d628675faf803b05ec8158555af3ab5557f93b39cf9196fed"} {"level":"info","ts":"2026-07-22T03:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/66ca44d70c6c701b8c78b4c350f3d02ecaeec1d20ba383aa6c94763833e89c93"} {"level":"info","ts":"2026-07-22T03:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8bf1795814160890474789dfff655fe728eb6216dd5b2057d4bdbad9a4de6806"} {"level":"info","ts":"2026-07-22T03:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/717580a485fbb6b144146d5a2fb34c186925a79cf940abc46668f9aaf54c4bed"} {"level":"info","ts":"2026-07-22T03:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/408137e4440abdaba6a4c1072d0c76db0c6f4d3565fd0687a2122902af8bce59"} {"level":"info","ts":"2026-07-22T03:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/056b8318aae7f8573503e8b38faf4406a6a16a7a9915462989c0dc48aa6ef101"} {"level":"info","ts":"2026-07-22T03:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782"} {"level":"info","ts":"2026-07-22T03:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5ca8a3d56a26017ac41c1648e68f9002d6f9240e84bc7a6978651bc087198392"} {"level":"debug","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0801329723242f344c7421604204d856c17fa36a4d3b032b0d2a3fbab2d53f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0801329723242f344c7421604204d856c17fa36a4d3b032b0d2a3fbab2d53f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0801329723242f344c7421604204d856c17fa36a4d3b032b0d2a3fbab2d53f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0801329723242f344c7421604204d856c17fa36a4d3b032b0d2a3fbab2d53f2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0801329723242f344c7421604204d856c17fa36a4d3b032b0d2a3fbab2d53f2"} {"level":"debug","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0801329723242f344c7421604204d856c17fa36a4d3b032b0d2a3fbab2d53f2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0801329723242f344c7421604204d856c17fa36a4d3b032b0d2a3fbab2d53f2"} {"level":"debug","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0801329723242f344c7421604204d856c17fa36a4d3b032b0d2a3fbab2d53f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:04:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:04:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0801329723242f344c7421604204d856c17fa36a4d3b032b0d2a3fbab2d53f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0801329723242f344c7421604204d856c17fa36a4d3b032b0d2a3fbab2d53f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0eecaba8a76861b97be95ee4bc1bf4235953bed9240c617f782924139e171a94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0eecaba8a76861b97be95ee4bc1bf4235953bed9240c617f782924139e171a94","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0801329723242f344c7421604204d856c17fa36a4d3b032b0d2a3fbab2d53f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0eecaba8a76861b97be95ee4bc1bf4235953bed9240c617f782924139e171a94","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0eecaba8a76861b97be95ee4bc1bf4235953bed9240c617f782924139e171a94","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0eecaba8a76861b97be95ee4bc1bf4235953bed9240c617f782924139e171a94"} {"level":"debug","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0eecaba8a76861b97be95ee4bc1bf4235953bed9240c617f782924139e171a94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:04:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:04:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0eecaba8a76861b97be95ee4bc1bf4235953bed9240c617f782924139e171a94"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0801329723242f344c7421604204d856c17fa36a4d3b032b0d2a3fbab2d53f2"} {"level":"info","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0eecaba8a76861b97be95ee4bc1bf4235953bed9240c617f782924139e171a94","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0eecaba8a76861b97be95ee4bc1bf4235953bed9240c617f782924139e171a94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0eecaba8a76861b97be95ee4bc1bf4235953bed9240c617f782924139e171a94"} {"level":"info","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0eecaba8a76861b97be95ee4bc1bf4235953bed9240c617f782924139e171a94","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0eecaba8a76861b97be95ee4bc1bf4235953bed9240c617f782924139e171a94","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0eecaba8a76861b97be95ee4bc1bf4235953bed9240c617f782924139e171a94","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0eecaba8a76861b97be95ee4bc1bf4235953bed9240c617f782924139e171a94"} {"level":"debug","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0eecaba8a76861b97be95ee4bc1bf4235953bed9240c617f782924139e171a94","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0eecaba8a76861b97be95ee4bc1bf4235953bed9240c617f782924139e171a94"} {"level":"debug","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0eecaba8a76861b97be95ee4bc1bf4235953bed9240c617f782924139e171a94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:04:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:04:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0eecaba8a76861b97be95ee4bc1bf4235953bed9240c617f782924139e171a94"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0eecaba8a76861b97be95ee4bc1bf4235953bed9240c617f782924139e171a94","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0eecaba8a76861b97be95ee4bc1bf4235953bed9240c617f782924139e171a94","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0eecaba8a76861b97be95ee4bc1bf4235953bed9240c617f782924139e171a94"} {"level":"debug","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0eb85996ca32715192fa0d8945eb09279781286ecba24deec976aea18348acd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0eb85996ca32715192fa0d8945eb09279781286ecba24deec976aea18348acd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0eb85996ca32715192fa0d8945eb09279781286ecba24deec976aea18348acd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0eb85996ca32715192fa0d8945eb09279781286ecba24deec976aea18348acd8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0eb85996ca32715192fa0d8945eb09279781286ecba24deec976aea18348acd8"} {"level":"debug","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0eb85996ca32715192fa0d8945eb09279781286ecba24deec976aea18348acd8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0eb85996ca32715192fa0d8945eb09279781286ecba24deec976aea18348acd8"} {"level":"debug","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0eb85996ca32715192fa0d8945eb09279781286ecba24deec976aea18348acd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:04:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:04:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0eb85996ca32715192fa0d8945eb09279781286ecba24deec976aea18348acd8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0eb85996ca32715192fa0d8945eb09279781286ecba24deec976aea18348acd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0eb85996ca32715192fa0d8945eb09279781286ecba24deec976aea18348acd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"865d2aae842759d5351e3f05808106b259facce561d712cb22b36d16474bf764","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"865d2aae842759d5351e3f05808106b259facce561d712cb22b36d16474bf764","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"865d2aae842759d5351e3f05808106b259facce561d712cb22b36d16474bf764","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0eb85996ca32715192fa0d8945eb09279781286ecba24deec976aea18348acd8"} {"level":"debug","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"865d2aae842759d5351e3f05808106b259facce561d712cb22b36d16474bf764","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"865d2aae842759d5351e3f05808106b259facce561d712cb22b36d16474bf764","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"865d2aae842759d5351e3f05808106b259facce561d712cb22b36d16474bf764","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/865d2aae842759d5351e3f05808106b259facce561d712cb22b36d16474bf764"} {"level":"debug","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"865d2aae842759d5351e3f05808106b259facce561d712cb22b36d16474bf764","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/865d2aae842759d5351e3f05808106b259facce561d712cb22b36d16474bf764"} {"level":"debug","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0abb667483cbe542145705a87a7b930e4aa1a417a02e804704128654690b592c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0abb667483cbe542145705a87a7b930e4aa1a417a02e804704128654690b592c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e03993692b2642c385f0fb625782884a7d27c7d8649875c6eac67ce74440126b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e03993692b2642c385f0fb625782884a7d27c7d8649875c6eac67ce74440126b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0abb667483cbe542145705a87a7b930e4aa1a417a02e804704128654690b592c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0abb667483cbe542145705a87a7b930e4aa1a417a02e804704128654690b592c"} {"level":"info","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0abb667483cbe542145705a87a7b930e4aa1a417a02e804704128654690b592c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e03993692b2642c385f0fb625782884a7d27c7d8649875c6eac67ce74440126b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e03993692b2642c385f0fb625782884a7d27c7d8649875c6eac67ce74440126b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"865d2aae842759d5351e3f05808106b259facce561d712cb22b36d16474bf764","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:04:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:04:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["865d2aae842759d5351e3f05808106b259facce561d712cb22b36d16474bf764"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e03993692b2642c385f0fb625782884a7d27c7d8649875c6eac67ce74440126b"} {"level":"info","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"865d2aae842759d5351e3f05808106b259facce561d712cb22b36d16474bf764","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0abb667483cbe542145705a87a7b930e4aa1a417a02e804704128654690b592c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e03993692b2642c385f0fb625782884a7d27c7d8649875c6eac67ce74440126b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:04:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:04:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e03993692b2642c385f0fb625782884a7d27c7d8649875c6eac67ce74440126b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0abb667483cbe542145705a87a7b930e4aa1a417a02e804704128654690b592c"} {"level":"info","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e03993692b2642c385f0fb625782884a7d27c7d8649875c6eac67ce74440126b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"865d2aae842759d5351e3f05808106b259facce561d712cb22b36d16474bf764","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e03993692b2642c385f0fb625782884a7d27c7d8649875c6eac67ce74440126b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e03993692b2642c385f0fb625782884a7d27c7d8649875c6eac67ce74440126b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0abb667483cbe542145705a87a7b930e4aa1a417a02e804704128654690b592c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:04:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:04:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0abb667483cbe542145705a87a7b930e4aa1a417a02e804704128654690b592c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e03993692b2642c385f0fb625782884a7d27c7d8649875c6eac67ce74440126b"} {"level":"info","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0abb667483cbe542145705a87a7b930e4aa1a417a02e804704128654690b592c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e03993692b2642c385f0fb625782884a7d27c7d8649875c6eac67ce74440126b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:04:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:04:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e03993692b2642c385f0fb625782884a7d27c7d8649875c6eac67ce74440126b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e03993692b2642c385f0fb625782884a7d27c7d8649875c6eac67ce74440126b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0abb667483cbe542145705a87a7b930e4aa1a417a02e804704128654690b592c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e03993692b2642c385f0fb625782884a7d27c7d8649875c6eac67ce74440126b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/865d2aae842759d5351e3f05808106b259facce561d712cb22b36d16474bf764"} {"level":"info","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e03993692b2642c385f0fb625782884a7d27c7d8649875c6eac67ce74440126b"} {"level":"info","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0abb667483cbe542145705a87a7b930e4aa1a417a02e804704128654690b592c"} {"level":"debug","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7356af964aeb430ef153858e57cd2561b73fcc6d7c093266069fbeb278047d03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7356af964aeb430ef153858e57cd2561b73fcc6d7c093266069fbeb278047d03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7356af964aeb430ef153858e57cd2561b73fcc6d7c093266069fbeb278047d03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7356af964aeb430ef153858e57cd2561b73fcc6d7c093266069fbeb278047d03"} {"level":"info","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7356af964aeb430ef153858e57cd2561b73fcc6d7c093266069fbeb278047d03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7356af964aeb430ef153858e57cd2561b73fcc6d7c093266069fbeb278047d03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7356af964aeb430ef153858e57cd2561b73fcc6d7c093266069fbeb278047d03","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7356af964aeb430ef153858e57cd2561b73fcc6d7c093266069fbeb278047d03\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7356af964aeb430ef153858e57cd2561b73fcc6d7c093266069fbeb278047d03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7356af964aeb430ef153858e57cd2561b73fcc6d7c093266069fbeb278047d03","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7356af964aeb430ef153858e57cd2561b73fcc6d7c093266069fbeb278047d03"} {"level":"info","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7356af964aeb430ef153858e57cd2561b73fcc6d7c093266069fbeb278047d03"} {"level":"debug","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4bf38e580f3e43d6297130813c91d599a77b1b1c2932af4a87b336a542c3abd4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794"} {"level":"info","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4bf38e580f3e43d6297130813c91d599a77b1b1c2932af4a87b336a542c3abd4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:04:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:04:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4bf38e580f3e43d6297130813c91d599a77b1b1c2932af4a87b336a542c3abd4"} {"level":"info","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7356af964aeb430ef153858e57cd2561b73fcc6d7c093266069fbeb278047d03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:04:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:04:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7356af964aeb430ef153858e57cd2561b73fcc6d7c093266069fbeb278047d03"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7356af964aeb430ef153858e57cd2561b73fcc6d7c093266069fbeb278047d03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4bf38e580f3e43d6297130813c91d599a77b1b1c2932af4a87b336a542c3abd4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:04:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:04:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4bf38e580f3e43d6297130813c91d599a77b1b1c2932af4a87b336a542c3abd4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794"} {"level":"info","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4bf38e580f3e43d6297130813c91d599a77b1b1c2932af4a87b336a542c3abd4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7356af964aeb430ef153858e57cd2561b73fcc6d7c093266069fbeb278047d03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4bf38e580f3e43d6297130813c91d599a77b1b1c2932af4a87b336a542c3abd4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4bf38e580f3e43d6297130813c91d599a77b1b1c2932af4a87b336a542c3abd4"} {"level":"info","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4bf38e580f3e43d6297130813c91d599a77b1b1c2932af4a87b336a542c3abd4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4bf38e580f3e43d6297130813c91d599a77b1b1c2932af4a87b336a542c3abd4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:04:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:04:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4bf38e580f3e43d6297130813c91d599a77b1b1c2932af4a87b336a542c3abd4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7356af964aeb430ef153858e57cd2561b73fcc6d7c093266069fbeb278047d03"} {"level":"info","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4bf38e580f3e43d6297130813c91d599a77b1b1c2932af4a87b336a542c3abd4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4bf38e580f3e43d6297130813c91d599a77b1b1c2932af4a87b336a542c3abd4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4bf38e580f3e43d6297130813c91d599a77b1b1c2932af4a87b336a542c3abd4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4bf38e580f3e43d6297130813c91d599a77b1b1c2932af4a87b336a542c3abd4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4bf38e580f3e43d6297130813c91d599a77b1b1c2932af4a87b336a542c3abd4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4bf38e580f3e43d6297130813c91d599a77b1b1c2932af4a87b336a542c3abd4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4bf38e580f3e43d6297130813c91d599a77b1b1c2932af4a87b336a542c3abd4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794"} {"level":"info","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4bf38e580f3e43d6297130813c91d599a77b1b1c2932af4a87b336a542c3abd4"} {"level":"debug","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd"} {"level":"info","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd"} {"level":"info","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd"} {"level":"debug","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc0232c3e97cb2e76672830440ec13514e41bccbbe90583ce3dfc74391451f02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782"} {"level":"info","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc0232c3e97cb2e76672830440ec13514e41bccbbe90583ce3dfc74391451f02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc0232c3e97cb2e76672830440ec13514e41bccbbe90583ce3dfc74391451f02"} {"level":"info","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1981cebd3412fe12b03f3c58fe7c235551ffb9fd6ad29da68be0632dcea4a03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782"} {"level":"info","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1981cebd3412fe12b03f3c58fe7c235551ffb9fd6ad29da68be0632dcea4a03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc0232c3e97cb2e76672830440ec13514e41bccbbe90583ce3dfc74391451f02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc0232c3e97cb2e76672830440ec13514e41bccbbe90583ce3dfc74391451f02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc0232c3e97cb2e76672830440ec13514e41bccbbe90583ce3dfc74391451f02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1981cebd3412fe12b03f3c58fe7c235551ffb9fd6ad29da68be0632dcea4a03"} {"level":"info","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d7299f602df90f3bc5ef9e12ac0fb2c42a886532fa31bd5e084601705895ce7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac"} {"level":"info","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d7299f602df90f3bc5ef9e12ac0fb2c42a886532fa31bd5e084601705895ce7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1981cebd3412fe12b03f3c58fe7c235551ffb9fd6ad29da68be0632dcea4a03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1981cebd3412fe12b03f3c58fe7c235551ffb9fd6ad29da68be0632dcea4a03"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1981cebd3412fe12b03f3c58fe7c235551ffb9fd6ad29da68be0632dcea4a03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc0232c3e97cb2e76672830440ec13514e41bccbbe90583ce3dfc74391451f02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc0232c3e97cb2e76672830440ec13514e41bccbbe90583ce3dfc74391451f02"} {"level":"info","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc0232c3e97cb2e76672830440ec13514e41bccbbe90583ce3dfc74391451f02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d7299f602df90f3bc5ef9e12ac0fb2c42a886532fa31bd5e084601705895ce7"} {"level":"info","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0d1d1805ea5a922a7a9028903072f74982c224ce3d799eadaeda7771dd6d8ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0d1d1805ea5a922a7a9028903072f74982c224ce3d799eadaeda7771dd6d8ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d7299f602df90f3bc5ef9e12ac0fb2c42a886532fa31bd5e084601705895ce7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d7299f602df90f3bc5ef9e12ac0fb2c42a886532fa31bd5e084601705895ce7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd"} {"level":"info","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d7299f602df90f3bc5ef9e12ac0fb2c42a886532fa31bd5e084601705895ce7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f68121580a72b47e1fbb621248b2bf0d6c2f0c50783698829b1fa09104cc9b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1981cebd3412fe12b03f3c58fe7c235551ffb9fd6ad29da68be0632dcea4a03"} {"level":"info","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f68121580a72b47e1fbb621248b2bf0d6c2f0c50783698829b1fa09104cc9b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1981cebd3412fe12b03f3c58fe7c235551ffb9fd6ad29da68be0632dcea4a03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30dc239e7db8f6679cbce36f1ceb0cd72fb7ecb5337fac0fb59890fcdf9687fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30dc239e7db8f6679cbce36f1ceb0cd72fb7ecb5337fac0fb59890fcdf9687fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc0232c3e97cb2e76672830440ec13514e41bccbbe90583ce3dfc74391451f02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc0232c3e97cb2e76672830440ec13514e41bccbbe90583ce3dfc74391451f02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0d1d1805ea5a922a7a9028903072f74982c224ce3d799eadaeda7771dd6d8ea"} {"level":"info","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc0232c3e97cb2e76672830440ec13514e41bccbbe90583ce3dfc74391451f02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac"} {"level":"info","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0d1d1805ea5a922a7a9028903072f74982c224ce3d799eadaeda7771dd6d8ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0d1d1805ea5a922a7a9028903072f74982c224ce3d799eadaeda7771dd6d8ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0d1d1805ea5a922a7a9028903072f74982c224ce3d799eadaeda7771dd6d8ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d7299f602df90f3bc5ef9e12ac0fb2c42a886532fa31bd5e084601705895ce7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f68121580a72b47e1fbb621248b2bf0d6c2f0c50783698829b1fa09104cc9b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f68121580a72b47e1fbb621248b2bf0d6c2f0c50783698829b1fa09104cc9b0"} {"level":"info","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f68121580a72b47e1fbb621248b2bf0d6c2f0c50783698829b1fa09104cc9b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d2060773ae979d78ee8b5791d1ef20accec45cc0a9ce82c022cf444af5b0a8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30dc239e7db8f6679cbce36f1ceb0cd72fb7ecb5337fac0fb59890fcdf9687fd"} {"level":"info","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d2060773ae979d78ee8b5791d1ef20accec45cc0a9ce82c022cf444af5b0a8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30dc239e7db8f6679cbce36f1ceb0cd72fb7ecb5337fac0fb59890fcdf9687fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30dc239e7db8f6679cbce36f1ceb0cd72fb7ecb5337fac0fb59890fcdf9687fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30dc239e7db8f6679cbce36f1ceb0cd72fb7ecb5337fac0fb59890fcdf9687fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed1a3d669bc844dd6cdb37e838fc633f618239b117b1012a19db16748b1ffea6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc0232c3e97cb2e76672830440ec13514e41bccbbe90583ce3dfc74391451f02"} {"level":"info","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed1a3d669bc844dd6cdb37e838fc633f618239b117b1012a19db16748b1ffea6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc0232c3e97cb2e76672830440ec13514e41bccbbe90583ce3dfc74391451f02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0d1d1805ea5a922a7a9028903072f74982c224ce3d799eadaeda7771dd6d8ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f68121580a72b47e1fbb621248b2bf0d6c2f0c50783698829b1fa09104cc9b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f68121580a72b47e1fbb621248b2bf0d6c2f0c50783698829b1fa09104cc9b0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f68121580a72b47e1fbb621248b2bf0d6c2f0c50783698829b1fa09104cc9b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d2060773ae979d78ee8b5791d1ef20accec45cc0a9ce82c022cf444af5b0a8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30dc239e7db8f6679cbce36f1ceb0cd72fb7ecb5337fac0fb59890fcdf9687fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"583afe5112f8e83fa8a86643d0c81673859abcef197ffd08765372f7c420b246","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d7299f602df90f3bc5ef9e12ac0fb2c42a886532fa31bd5e084601705895ce7"} {"level":"info","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"583afe5112f8e83fa8a86643d0c81673859abcef197ffd08765372f7c420b246","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed1a3d669bc844dd6cdb37e838fc633f618239b117b1012a19db16748b1ffea6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91753b6da497c9d5438ae65389df2b77a157dc9693d70791d332b6f78c421376","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d2060773ae979d78ee8b5791d1ef20accec45cc0a9ce82c022cf444af5b0a8b"} {"level":"info","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91753b6da497c9d5438ae65389df2b77a157dc9693d70791d332b6f78c421376","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f68121580a72b47e1fbb621248b2bf0d6c2f0c50783698829b1fa09104cc9b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d2060773ae979d78ee8b5791d1ef20accec45cc0a9ce82c022cf444af5b0a8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d2060773ae979d78ee8b5791d1ef20accec45cc0a9ce82c022cf444af5b0a8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed1a3d669bc844dd6cdb37e838fc633f618239b117b1012a19db16748b1ffea6"} {"level":"info","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac"} {"level":"info","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d2060773ae979d78ee8b5791d1ef20accec45cc0a9ce82c022cf444af5b0a8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"583afe5112f8e83fa8a86643d0c81673859abcef197ffd08765372f7c420b246","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed1a3d669bc844dd6cdb37e838fc633f618239b117b1012a19db16748b1ffea6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed1a3d669bc844dd6cdb37e838fc633f618239b117b1012a19db16748b1ffea6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0d1d1805ea5a922a7a9028903072f74982c224ce3d799eadaeda7771dd6d8ea"} {"level":"info","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f68121580a72b47e1fbb621248b2bf0d6c2f0c50783698829b1fa09104cc9b0"} {"level":"info","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30dc239e7db8f6679cbce36f1ceb0cd72fb7ecb5337fac0fb59890fcdf9687fd"} {"level":"info","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed1a3d669bc844dd6cdb37e838fc633f618239b117b1012a19db16748b1ffea6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91753b6da497c9d5438ae65389df2b77a157dc9693d70791d332b6f78c421376","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e35b183337334de8c3ba6c98f0fcda7c45d143b7c75467db06714276be920296","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/583afe5112f8e83fa8a86643d0c81673859abcef197ffd08765372f7c420b246"} {"level":"info","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91753b6da497c9d5438ae65389df2b77a157dc9693d70791d332b6f78c421376"} {"level":"info","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e35b183337334de8c3ba6c98f0fcda7c45d143b7c75467db06714276be920296","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1ea5d177f6054767535a590ed26a0cd4c9e509b82b939706a8433f2b592e55b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e35b183337334de8c3ba6c98f0fcda7c45d143b7c75467db06714276be920296"} {"level":"info","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1ea5d177f6054767535a590ed26a0cd4c9e509b82b939706a8433f2b592e55b"} {"level":"info","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d2060773ae979d78ee8b5791d1ef20accec45cc0a9ce82c022cf444af5b0a8b"} {"level":"info","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1ea5d177f6054767535a590ed26a0cd4c9e509b82b939706a8433f2b592e55b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d2060773ae979d78ee8b5791d1ef20accec45cc0a9ce82c022cf444af5b0a8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"583afe5112f8e83fa8a86643d0c81673859abcef197ffd08765372f7c420b246","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["583afe5112f8e83fa8a86643d0c81673859abcef197ffd08765372f7c420b246"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed1a3d669bc844dd6cdb37e838fc633f618239b117b1012a19db16748b1ffea6"} {"level":"info","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e35b183337334de8c3ba6c98f0fcda7c45d143b7c75467db06714276be920296"} {"level":"info","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"583afe5112f8e83fa8a86643d0c81673859abcef197ffd08765372f7c420b246","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed1a3d669bc844dd6cdb37e838fc633f618239b117b1012a19db16748b1ffea6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91753b6da497c9d5438ae65389df2b77a157dc9693d70791d332b6f78c421376","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91753b6da497c9d5438ae65389df2b77a157dc9693d70791d332b6f78c421376"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1ea5d177f6054767535a590ed26a0cd4c9e509b82b939706a8433f2b592e55b"} {"level":"info","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/583afe5112f8e83fa8a86643d0c81673859abcef197ffd08765372f7c420b246"} {"level":"info","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91753b6da497c9d5438ae65389df2b77a157dc9693d70791d332b6f78c421376","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e35b183337334de8c3ba6c98f0fcda7c45d143b7c75467db06714276be920296","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e35b183337334de8c3ba6c98f0fcda7c45d143b7c75467db06714276be920296"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91753b6da497c9d5438ae65389df2b77a157dc9693d70791d332b6f78c421376"} {"level":"info","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e35b183337334de8c3ba6c98f0fcda7c45d143b7c75467db06714276be920296","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1ea5d177f6054767535a590ed26a0cd4c9e509b82b939706a8433f2b592e55b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1ea5d177f6054767535a590ed26a0cd4c9e509b82b939706a8433f2b592e55b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e35b183337334de8c3ba6c98f0fcda7c45d143b7c75467db06714276be920296"} {"level":"info","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1ea5d177f6054767535a590ed26a0cd4c9e509b82b939706a8433f2b592e55b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"583afe5112f8e83fa8a86643d0c81673859abcef197ffd08765372f7c420b246","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91753b6da497c9d5438ae65389df2b77a157dc9693d70791d332b6f78c421376","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e35b183337334de8c3ba6c98f0fcda7c45d143b7c75467db06714276be920296","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1ea5d177f6054767535a590ed26a0cd4c9e509b82b939706a8433f2b592e55b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1ea5d177f6054767535a590ed26a0cd4c9e509b82b939706a8433f2b592e55b"} {"level":"info","ts":"2026-07-22T03:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1ea5d177f6054767535a590ed26a0cd4c9e509b82b939706a8433f2b592e55b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1ea5d177f6054767535a590ed26a0cd4c9e509b82b939706a8433f2b592e55b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:04:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:04:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1ea5d177f6054767535a590ed26a0cd4c9e509b82b939706a8433f2b592e55b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1ea5d177f6054767535a590ed26a0cd4c9e509b82b939706a8433f2b592e55b"} {"level":"info","ts":"2026-07-22T03:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1ea5d177f6054767535a590ed26a0cd4c9e509b82b939706a8433f2b592e55b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1ea5d177f6054767535a590ed26a0cd4c9e509b82b939706a8433f2b592e55b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:04:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:04:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1ea5d177f6054767535a590ed26a0cd4c9e509b82b939706a8433f2b592e55b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1ea5d177f6054767535a590ed26a0cd4c9e509b82b939706a8433f2b592e55b"} {"level":"error","ts":"2026-07-22T03:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d1ea5d177f6054767535a590ed26a0cd4c9e509b82b939706a8433f2b592e55b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d1ea5d177f6054767535a590ed26a0cd4c9e509b82b939706a8433f2b592e55b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T03:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1ea5d177f6054767535a590ed26a0cd4c9e509b82b939706a8433f2b592e55b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1ea5d177f6054767535a590ed26a0cd4c9e509b82b939706a8433f2b592e55b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:04:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4d8f2e93-bd2a-4867-8379-dafba25fdd2e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:44544","PortSpecifier":{"PortValue":44544}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4d8f2e93-bd2a-4867-8379-dafba25fdd2e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-995f8f.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T03:04:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4d8f2e93-bd2a-4867-8379-dafba25fdd2e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:44544","PortSpecifier":{"PortValue":44544}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784689466,"nanos":372990507},"http":{"id":"4d8f2e93-bd2a-4867-8379-dafba25fdd2e","method":"POST","headers":{":authority":"e2e-shared-a-995f8f.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:04:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4d8f2e93-bd2a-4867-8379-dafba25fdd2e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T03:04:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4d8f2e93-bd2a-4867-8379-dafba25fdd2e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1b8f5dc6-d648-43b5-a1c0-52422d83042f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6a1776ec-780a-4077-bf07-9fd8a76fea35"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa8b523815bc"]}} {"level":"debug","ts":"2026-07-22T03:04:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4d8f2e93-bd2a-4867-8379-dafba25fdd2e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa8b523815bc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6a1776ec-780a-4077-bf07-9fd8a76fea35"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1b8f5dc6-d648-43b5-a1c0-52422d83042f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"30dc239e7db8f6679cbce36f1ceb0cd72fb7ecb5337fac0fb59890fcdf9687fd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-995f8f.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:04:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4d8f2e93-bd2a-4867-8379-dafba25fdd2e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:04:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4d8f2e93-bd2a-4867-8379-dafba25fdd2e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:04:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4d8f2e93-bd2a-4867-8379-dafba25fdd2e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-995f8f/sub-test-model-995f8f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-995f8f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:04:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4d8f2e93-bd2a-4867-8379-dafba25fdd2e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T03:04:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4d8f2e93-bd2a-4867-8379-dafba25fdd2e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T03:04:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4d8f2e93-bd2a-4867-8379-dafba25fdd2e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-22T03:04:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4d8f2e93-bd2a-4867-8379-dafba25fdd2e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T03:04:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4d8f2e93-bd2a-4867-8379-dafba25fdd2e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T03:04:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"02f14c23-a76d-4a0f-a183-3e48da4b676e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:59024","PortSpecifier":{"PortValue":59024}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"02f14c23-a76d-4a0f-a183-3e48da4b676e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-bb8c9d.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T03:04:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"02f14c23-a76d-4a0f-a183-3e48da4b676e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:59024","PortSpecifier":{"PortValue":59024}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784689466,"nanos":423659978},"http":{"id":"02f14c23-a76d-4a0f-a183-3e48da4b676e","method":"POST","headers":{":authority":"e2e-shared-b-bb8c9d.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:04:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"02f14c23-a76d-4a0f-a183-3e48da4b676e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T03:04:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"02f14c23-a76d-4a0f-a183-3e48da4b676e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1b8f5dc6-d648-43b5-a1c0-52422d83042f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6a1776ec-780a-4077-bf07-9fd8a76fea35"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa8b523815bc"]}} {"level":"debug","ts":"2026-07-22T03:04:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"02f14c23-a76d-4a0f-a183-3e48da4b676e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa8b523815bc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6a1776ec-780a-4077-bf07-9fd8a76fea35"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1b8f5dc6-d648-43b5-a1c0-52422d83042f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-bb8c9d.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:04:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02f14c23-a76d-4a0f-a183-3e48da4b676e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:04:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02f14c23-a76d-4a0f-a183-3e48da4b676e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:04:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02f14c23-a76d-4a0f-a183-3e48da4b676e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-bb8c9d/sub-test-model-bb8c9d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-bb8c9d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:04:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"02f14c23-a76d-4a0f-a183-3e48da4b676e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T03:04:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"02f14c23-a76d-4a0f-a183-3e48da4b676e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T03:04:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"02f14c23-a76d-4a0f-a183-3e48da4b676e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T03:04:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"02f14c23-a76d-4a0f-a183-3e48da4b676e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T03:04:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"02f14c23-a76d-4a0f-a183-3e48da4b676e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T03:04:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57de1096-4bf7-4501-b77d-1e1c3f631756","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:44558","PortSpecifier":{"PortValue":44558}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"57de1096-4bf7-4501-b77d-1e1c3f631756","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-995f8f.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T03:04:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57de1096-4bf7-4501-b77d-1e1c3f631756","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:44558","PortSpecifier":{"PortValue":44558}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784689466,"nanos":463296702},"http":{"id":"57de1096-4bf7-4501-b77d-1e1c3f631756","method":"GET","headers":{":authority":"e2e-shared-a-995f8f.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:04:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"57de1096-4bf7-4501-b77d-1e1c3f631756","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Y28q9G9ZUQkb8p8w_MFwQZlH93i1G4bT1GxRuuVqxfBDjkr1cqys03r39OJX"} {"level":"debug","ts":"2026-07-22T03:04:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"57de1096-4bf7-4501-b77d-1e1c3f631756","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-995f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Y28q9G9ZUQkb8p8w_MFwQZlH93i1G4bT1GxRuuVqxfBDjkr1cqys03r39OJX\"}"} {"level":"debug","ts":"2026-07-22T03:04:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"57de1096-4bf7-4501-b77d-1e1c3f631756","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-995f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8434002f-76ce-463c-bed8-9425f40a762a","keyName":"e2e-sub-iso-05147a","subscription":"e2e-a-only-c1308b","tenant":"e2e-shared-a-995f8f","userId":"8434002f-76ce-463c-bed8-9425f40a762a","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T03:04:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"57de1096-4bf7-4501-b77d-1e1c3f631756","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:04:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57de1096-4bf7-4501-b77d-1e1c3f631756","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:04:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57de1096-4bf7-4501-b77d-1e1c3f631756","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:04:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57de1096-4bf7-4501-b77d-1e1c3f631756","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-995f8f/sub-test-model-995f8f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-995f8f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:04:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57de1096-4bf7-4501-b77d-1e1c3f631756","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T03:04:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"57de1096-4bf7-4501-b77d-1e1c3f631756","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-22T03:04:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57de1096-4bf7-4501-b77d-1e1c3f631756","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T03:04:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57de1096-4bf7-4501-b77d-1e1c3f631756","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-c1308b"} {"level":"info","ts":"2026-07-22T03:04:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57de1096-4bf7-4501-b77d-1e1c3f631756","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T03:04:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57de1096-4bf7-4501-b77d-1e1c3f631756","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T03:04:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9640d14d-d26d-430c-b5b1-8849a1a7231f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:59038","PortSpecifier":{"PortValue":59038}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9640d14d-d26d-430c-b5b1-8849a1a7231f","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-bb8c9d.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T03:04:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9640d14d-d26d-430c-b5b1-8849a1a7231f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:59038","PortSpecifier":{"PortValue":59038}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784689466,"nanos":507066073},"http":{"id":"9640d14d-d26d-430c-b5b1-8849a1a7231f","method":"GET","headers":{":authority":"e2e-shared-b-bb8c9d.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:04:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9640d14d-d26d-430c-b5b1-8849a1a7231f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-sJmI2GxnymZA8dfJ_GjmzIIEXKWIj96tVbL0wIXprQsJmzscRrpANSV7KCuD"} {"level":"debug","ts":"2026-07-22T03:04:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9640d14d-d26d-430c-b5b1-8849a1a7231f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-bb8c9d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-sJmI2GxnymZA8dfJ_GjmzIIEXKWIj96tVbL0wIXprQsJmzscRrpANSV7KCuD\"}"} {"level":"debug","ts":"2026-07-22T03:04:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9640d14d-d26d-430c-b5b1-8849a1a7231f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-bb8c9d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2bc489a4-e2a9-46f2-af32-82b92781fab8","keyName":"e2e-sub-iso-203ebe","subscription":"e2e-b-only-c1308b","tenant":"e2e-shared-b-bb8c9d","userId":"2bc489a4-e2a9-46f2-af32-82b92781fab8","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T03:04:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9640d14d-d26d-430c-b5b1-8849a1a7231f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:04:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9640d14d-d26d-430c-b5b1-8849a1a7231f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:04:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9640d14d-d26d-430c-b5b1-8849a1a7231f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:04:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9640d14d-d26d-430c-b5b1-8849a1a7231f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-bb8c9d/sub-test-model-bb8c9d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-bb8c9d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:04:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9640d14d-d26d-430c-b5b1-8849a1a7231f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T03:04:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9640d14d-d26d-430c-b5b1-8849a1a7231f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T03:04:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9640d14d-d26d-430c-b5b1-8849a1a7231f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-22T03:04:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9640d14d-d26d-430c-b5b1-8849a1a7231f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-c1308b"} {"level":"info","ts":"2026-07-22T03:04:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9640d14d-d26d-430c-b5b1-8849a1a7231f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T03:04:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9640d14d-d26d-430c-b5b1-8849a1a7231f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T03:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0eecaba8a76861b97be95ee4bc1bf4235953bed9240c617f782924139e171a94"} {"level":"info","ts":"2026-07-22T03:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/865d2aae842759d5351e3f05808106b259facce561d712cb22b36d16474bf764"} {"level":"info","ts":"2026-07-22T03:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e03993692b2642c385f0fb625782884a7d27c7d8649875c6eac67ce74440126b"} {"level":"info","ts":"2026-07-22T03:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd"} {"level":"info","ts":"2026-07-22T03:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac"} {"level":"info","ts":"2026-07-22T03:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e35b183337334de8c3ba6c98f0fcda7c45d143b7c75467db06714276be920296"} {"level":"info","ts":"2026-07-22T03:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5d7299f602df90f3bc5ef9e12ac0fb2c42a886532fa31bd5e084601705895ce7"} {"level":"info","ts":"2026-07-22T03:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4bf38e580f3e43d6297130813c91d599a77b1b1c2932af4a87b336a542c3abd4"} {"level":"info","ts":"2026-07-22T03:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/30dc239e7db8f6679cbce36f1ceb0cd72fb7ecb5337fac0fb59890fcdf9687fd"} {"level":"info","ts":"2026-07-22T03:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794"} {"level":"info","ts":"2026-07-22T03:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7356af964aeb430ef153858e57cd2561b73fcc6d7c093266069fbeb278047d03"} {"level":"info","ts":"2026-07-22T03:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/583afe5112f8e83fa8a86643d0c81673859abcef197ffd08765372f7c420b246"} {"level":"info","ts":"2026-07-22T03:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5f68121580a72b47e1fbb621248b2bf0d6c2f0c50783698829b1fa09104cc9b0"} {"level":"info","ts":"2026-07-22T03:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3d2060773ae979d78ee8b5791d1ef20accec45cc0a9ce82c022cf444af5b0a8b"} {"level":"info","ts":"2026-07-22T03:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/91753b6da497c9d5438ae65389df2b77a157dc9693d70791d332b6f78c421376"} {"level":"info","ts":"2026-07-22T03:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ed1a3d669bc844dd6cdb37e838fc633f618239b117b1012a19db16748b1ffea6"} {"level":"info","ts":"2026-07-22T03:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f1981cebd3412fe12b03f3c58fe7c235551ffb9fd6ad29da68be0632dcea4a03"} {"level":"info","ts":"2026-07-22T03:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0eb85996ca32715192fa0d8945eb09279781286ecba24deec976aea18348acd8"} {"level":"info","ts":"2026-07-22T03:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782"} {"level":"info","ts":"2026-07-22T03:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b0d1d1805ea5a922a7a9028903072f74982c224ce3d799eadaeda7771dd6d8ea"} {"level":"info","ts":"2026-07-22T03:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b0801329723242f344c7421604204d856c17fa36a4d3b032b0d2a3fbab2d53f2"} {"level":"info","ts":"2026-07-22T03:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d1ea5d177f6054767535a590ed26a0cd4c9e509b82b939706a8433f2b592e55b"} {"level":"info","ts":"2026-07-22T03:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0abb667483cbe542145705a87a7b930e4aa1a417a02e804704128654690b592c"} {"level":"info","ts":"2026-07-22T03:04:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dc0232c3e97cb2e76672830440ec13514e41bccbbe90583ce3dfc74391451f02"} {"level":"debug","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e03993692b2642c385f0fb625782884a7d27c7d8649875c6eac67ce74440126b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e03993692b2642c385f0fb625782884a7d27c7d8649875c6eac67ce74440126b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e03993692b2642c385f0fb625782884a7d27c7d8649875c6eac67ce74440126b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e03993692b2642c385f0fb625782884a7d27c7d8649875c6eac67ce74440126b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e03993692b2642c385f0fb625782884a7d27c7d8649875c6eac67ce74440126b"} {"level":"debug","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e03993692b2642c385f0fb625782884a7d27c7d8649875c6eac67ce74440126b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e03993692b2642c385f0fb625782884a7d27c7d8649875c6eac67ce74440126b"} {"level":"debug","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e03993692b2642c385f0fb625782884a7d27c7d8649875c6eac67ce74440126b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:04:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:04:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e03993692b2642c385f0fb625782884a7d27c7d8649875c6eac67ce74440126b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e03993692b2642c385f0fb625782884a7d27c7d8649875c6eac67ce74440126b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e03993692b2642c385f0fb625782884a7d27c7d8649875c6eac67ce74440126b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e03993692b2642c385f0fb625782884a7d27c7d8649875c6eac67ce74440126b"} {"level":"debug","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0eb85996ca32715192fa0d8945eb09279781286ecba24deec976aea18348acd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0eb85996ca32715192fa0d8945eb09279781286ecba24deec976aea18348acd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0eb85996ca32715192fa0d8945eb09279781286ecba24deec976aea18348acd8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0eb85996ca32715192fa0d8945eb09279781286ecba24deec976aea18348acd8"} {"level":"debug","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0eb85996ca32715192fa0d8945eb09279781286ecba24deec976aea18348acd8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0eb85996ca32715192fa0d8945eb09279781286ecba24deec976aea18348acd8"} {"level":"debug","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0eb85996ca32715192fa0d8945eb09279781286ecba24deec976aea18348acd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:04:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:04:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0eb85996ca32715192fa0d8945eb09279781286ecba24deec976aea18348acd8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0eb85996ca32715192fa0d8945eb09279781286ecba24deec976aea18348acd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0eb85996ca32715192fa0d8945eb09279781286ecba24deec976aea18348acd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0eb85996ca32715192fa0d8945eb09279781286ecba24deec976aea18348acd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0eb85996ca32715192fa0d8945eb09279781286ecba24deec976aea18348acd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0eb85996ca32715192fa0d8945eb09279781286ecba24deec976aea18348acd8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0eb85996ca32715192fa0d8945eb09279781286ecba24deec976aea18348acd8"} {"level":"debug","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0eb85996ca32715192fa0d8945eb09279781286ecba24deec976aea18348acd8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0eb85996ca32715192fa0d8945eb09279781286ecba24deec976aea18348acd8"} {"level":"debug","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0eb85996ca32715192fa0d8945eb09279781286ecba24deec976aea18348acd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:04:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:04:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0eb85996ca32715192fa0d8945eb09279781286ecba24deec976aea18348acd8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0eb85996ca32715192fa0d8945eb09279781286ecba24deec976aea18348acd8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0eb85996ca32715192fa0d8945eb09279781286ecba24deec976aea18348acd8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0eb85996ca32715192fa0d8945eb09279781286ecba24deec976aea18348acd8"} {"level":"debug","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d7299f602df90f3bc5ef9e12ac0fb2c42a886532fa31bd5e084601705895ce7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d7299f602df90f3bc5ef9e12ac0fb2c42a886532fa31bd5e084601705895ce7"} {"level":"info","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d7299f602df90f3bc5ef9e12ac0fb2c42a886532fa31bd5e084601705895ce7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d7299f602df90f3bc5ef9e12ac0fb2c42a886532fa31bd5e084601705895ce7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d7299f602df90f3bc5ef9e12ac0fb2c42a886532fa31bd5e084601705895ce7"} {"level":"info","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d7299f602df90f3bc5ef9e12ac0fb2c42a886532fa31bd5e084601705895ce7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d7299f602df90f3bc5ef9e12ac0fb2c42a886532fa31bd5e084601705895ce7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d7299f602df90f3bc5ef9e12ac0fb2c42a886532fa31bd5e084601705895ce7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d7299f602df90f3bc5ef9e12ac0fb2c42a886532fa31bd5e084601705895ce7"} {"level":"debug","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d2060773ae979d78ee8b5791d1ef20accec45cc0a9ce82c022cf444af5b0a8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d2060773ae979d78ee8b5791d1ef20accec45cc0a9ce82c022cf444af5b0a8b"} {"level":"info","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d2060773ae979d78ee8b5791d1ef20accec45cc0a9ce82c022cf444af5b0a8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d7299f602df90f3bc5ef9e12ac0fb2c42a886532fa31bd5e084601705895ce7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:04:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:04:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d7299f602df90f3bc5ef9e12ac0fb2c42a886532fa31bd5e084601705895ce7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d2060773ae979d78ee8b5791d1ef20accec45cc0a9ce82c022cf444af5b0a8b"} {"level":"info","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d7299f602df90f3bc5ef9e12ac0fb2c42a886532fa31bd5e084601705895ce7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d2060773ae979d78ee8b5791d1ef20accec45cc0a9ce82c022cf444af5b0a8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:04:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:04:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d2060773ae979d78ee8b5791d1ef20accec45cc0a9ce82c022cf444af5b0a8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d7299f602df90f3bc5ef9e12ac0fb2c42a886532fa31bd5e084601705895ce7"} {"level":"info","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d2060773ae979d78ee8b5791d1ef20accec45cc0a9ce82c022cf444af5b0a8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d7299f602df90f3bc5ef9e12ac0fb2c42a886532fa31bd5e084601705895ce7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1ea5d177f6054767535a590ed26a0cd4c9e509b82b939706a8433f2b592e55b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1ea5d177f6054767535a590ed26a0cd4c9e509b82b939706a8433f2b592e55b"} {"level":"info","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1ea5d177f6054767535a590ed26a0cd4c9e509b82b939706a8433f2b592e55b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d2060773ae979d78ee8b5791d1ef20accec45cc0a9ce82c022cf444af5b0a8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d2060773ae979d78ee8b5791d1ef20accec45cc0a9ce82c022cf444af5b0a8b"} {"level":"info","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d2060773ae979d78ee8b5791d1ef20accec45cc0a9ce82c022cf444af5b0a8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1ea5d177f6054767535a590ed26a0cd4c9e509b82b939706a8433f2b592e55b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d2060773ae979d78ee8b5791d1ef20accec45cc0a9ce82c022cf444af5b0a8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:04:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:04:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d2060773ae979d78ee8b5791d1ef20accec45cc0a9ce82c022cf444af5b0a8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d2060773ae979d78ee8b5791d1ef20accec45cc0a9ce82c022cf444af5b0a8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1ea5d177f6054767535a590ed26a0cd4c9e509b82b939706a8433f2b592e55b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d2060773ae979d78ee8b5791d1ef20accec45cc0a9ce82c022cf444af5b0a8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:04:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:04:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d2060773ae979d78ee8b5791d1ef20accec45cc0a9ce82c022cf444af5b0a8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1ea5d177f6054767535a590ed26a0cd4c9e509b82b939706a8433f2b592e55b"} {"level":"error","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3d2060773ae979d78ee8b5791d1ef20accec45cc0a9ce82c022cf444af5b0a8b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3d2060773ae979d78ee8b5791d1ef20accec45cc0a9ce82c022cf444af5b0a8b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d2060773ae979d78ee8b5791d1ef20accec45cc0a9ce82c022cf444af5b0a8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d2060773ae979d78ee8b5791d1ef20accec45cc0a9ce82c022cf444af5b0a8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d1ea5d177f6054767535a590ed26a0cd4c9e509b82b939706a8433f2b592e55b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:04:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:04:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d1ea5d177f6054767535a590ed26a0cd4c9e509b82b939706a8433f2b592e55b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d1ea5d177f6054767535a590ed26a0cd4c9e509b82b939706a8433f2b592e55b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d2060773ae979d78ee8b5791d1ef20accec45cc0a9ce82c022cf444af5b0a8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed1a3d669bc844dd6cdb37e838fc633f618239b117b1012a19db16748b1ffea6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d2060773ae979d78ee8b5791d1ef20accec45cc0a9ce82c022cf444af5b0a8b"} {"level":"info","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed1a3d669bc844dd6cdb37e838fc633f618239b117b1012a19db16748b1ffea6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d2060773ae979d78ee8b5791d1ef20accec45cc0a9ce82c022cf444af5b0a8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:04:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:04:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d2060773ae979d78ee8b5791d1ef20accec45cc0a9ce82c022cf444af5b0a8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d2060773ae979d78ee8b5791d1ef20accec45cc0a9ce82c022cf444af5b0a8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1ea5d177f6054767535a590ed26a0cd4c9e509b82b939706a8433f2b592e55b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed1a3d669bc844dd6cdb37e838fc633f618239b117b1012a19db16748b1ffea6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed1a3d669bc844dd6cdb37e838fc633f618239b117b1012a19db16748b1ffea6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d2060773ae979d78ee8b5791d1ef20accec45cc0a9ce82c022cf444af5b0a8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed1a3d669bc844dd6cdb37e838fc633f618239b117b1012a19db16748b1ffea6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed1a3d669bc844dd6cdb37e838fc633f618239b117b1012a19db16748b1ffea6"} {"level":"debug","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed1a3d669bc844dd6cdb37e838fc633f618239b117b1012a19db16748b1ffea6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:04:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:04:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed1a3d669bc844dd6cdb37e838fc633f618239b117b1012a19db16748b1ffea6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed1a3d669bc844dd6cdb37e838fc633f618239b117b1012a19db16748b1ffea6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30dc239e7db8f6679cbce36f1ceb0cd72fb7ecb5337fac0fb59890fcdf9687fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1ea5d177f6054767535a590ed26a0cd4c9e509b82b939706a8433f2b592e55b"} {"level":"info","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30dc239e7db8f6679cbce36f1ceb0cd72fb7ecb5337fac0fb59890fcdf9687fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed1a3d669bc844dd6cdb37e838fc633f618239b117b1012a19db16748b1ffea6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30dc239e7db8f6679cbce36f1ceb0cd72fb7ecb5337fac0fb59890fcdf9687fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30dc239e7db8f6679cbce36f1ceb0cd72fb7ecb5337fac0fb59890fcdf9687fd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d2060773ae979d78ee8b5791d1ef20accec45cc0a9ce82c022cf444af5b0a8b"} {"level":"debug","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30dc239e7db8f6679cbce36f1ceb0cd72fb7ecb5337fac0fb59890fcdf9687fd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed1a3d669bc844dd6cdb37e838fc633f618239b117b1012a19db16748b1ffea6"} {"level":"info","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30dc239e7db8f6679cbce36f1ceb0cd72fb7ecb5337fac0fb59890fcdf9687fd"} {"level":"debug","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30dc239e7db8f6679cbce36f1ceb0cd72fb7ecb5337fac0fb59890fcdf9687fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:04:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:04:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30dc239e7db8f6679cbce36f1ceb0cd72fb7ecb5337fac0fb59890fcdf9687fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30dc239e7db8f6679cbce36f1ceb0cd72fb7ecb5337fac0fb59890fcdf9687fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30dc239e7db8f6679cbce36f1ceb0cd72fb7ecb5337fac0fb59890fcdf9687fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac"} {"level":"debug","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:04:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:04:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30dc239e7db8f6679cbce36f1ceb0cd72fb7ecb5337fac0fb59890fcdf9687fd"} {"level":"info","ts":"2026-07-22T03:04:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac"} {"level":"debug","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f68121580a72b47e1fbb621248b2bf0d6c2f0c50783698829b1fa09104cc9b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd"} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f68121580a72b47e1fbb621248b2bf0d6c2f0c50783698829b1fa09104cc9b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f68121580a72b47e1fbb621248b2bf0d6c2f0c50783698829b1fa09104cc9b0"} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f68121580a72b47e1fbb621248b2bf0d6c2f0c50783698829b1fa09104cc9b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f68121580a72b47e1fbb621248b2bf0d6c2f0c50783698829b1fa09104cc9b0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f68121580a72b47e1fbb621248b2bf0d6c2f0c50783698829b1fa09104cc9b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd"} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f68121580a72b47e1fbb621248b2bf0d6c2f0c50783698829b1fa09104cc9b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f68121580a72b47e1fbb621248b2bf0d6c2f0c50783698829b1fa09104cc9b0"} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f68121580a72b47e1fbb621248b2bf0d6c2f0c50783698829b1fa09104cc9b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f68121580a72b47e1fbb621248b2bf0d6c2f0c50783698829b1fa09104cc9b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f68121580a72b47e1fbb621248b2bf0d6c2f0c50783698829b1fa09104cc9b0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd"} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f68121580a72b47e1fbb621248b2bf0d6c2f0c50783698829b1fa09104cc9b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e35b183337334de8c3ba6c98f0fcda7c45d143b7c75467db06714276be920296","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f68121580a72b47e1fbb621248b2bf0d6c2f0c50783698829b1fa09104cc9b0"} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e35b183337334de8c3ba6c98f0fcda7c45d143b7c75467db06714276be920296","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f68121580a72b47e1fbb621248b2bf0d6c2f0c50783698829b1fa09104cc9b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e35b183337334de8c3ba6c98f0fcda7c45d143b7c75467db06714276be920296","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e35b183337334de8c3ba6c98f0fcda7c45d143b7c75467db06714276be920296"} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e35b183337334de8c3ba6c98f0fcda7c45d143b7c75467db06714276be920296","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e35b183337334de8c3ba6c98f0fcda7c45d143b7c75467db06714276be920296","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e35b183337334de8c3ba6c98f0fcda7c45d143b7c75467db06714276be920296"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e35b183337334de8c3ba6c98f0fcda7c45d143b7c75467db06714276be920296","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e35b183337334de8c3ba6c98f0fcda7c45d143b7c75467db06714276be920296\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e35b183337334de8c3ba6c98f0fcda7c45d143b7c75467db06714276be920296","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e35b183337334de8c3ba6c98f0fcda7c45d143b7c75467db06714276be920296"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd"} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e35b183337334de8c3ba6c98f0fcda7c45d143b7c75467db06714276be920296","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e35b183337334de8c3ba6c98f0fcda7c45d143b7c75467db06714276be920296","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e35b183337334de8c3ba6c98f0fcda7c45d143b7c75467db06714276be920296"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e35b183337334de8c3ba6c98f0fcda7c45d143b7c75467db06714276be920296","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e35b183337334de8c3ba6c98f0fcda7c45d143b7c75467db06714276be920296\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e35b183337334de8c3ba6c98f0fcda7c45d143b7c75467db06714276be920296","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e35b183337334de8c3ba6c98f0fcda7c45d143b7c75467db06714276be920296","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f68121580a72b47e1fbb621248b2bf0d6c2f0c50783698829b1fa09104cc9b0"} {"level":"debug","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4bf38e580f3e43d6297130813c91d599a77b1b1c2932af4a87b336a542c3abd4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4bf38e580f3e43d6297130813c91d599a77b1b1c2932af4a87b336a542c3abd4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0abb667483cbe542145705a87a7b930e4aa1a417a02e804704128654690b592c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e35b183337334de8c3ba6c98f0fcda7c45d143b7c75467db06714276be920296"} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0abb667483cbe542145705a87a7b930e4aa1a417a02e804704128654690b592c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4bf38e580f3e43d6297130813c91d599a77b1b1c2932af4a87b336a542c3abd4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4bf38e580f3e43d6297130813c91d599a77b1b1c2932af4a87b336a542c3abd4"} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4bf38e580f3e43d6297130813c91d599a77b1b1c2932af4a87b336a542c3abd4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0d1d1805ea5a922a7a9028903072f74982c224ce3d799eadaeda7771dd6d8ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0d1d1805ea5a922a7a9028903072f74982c224ce3d799eadaeda7771dd6d8ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0abb667483cbe542145705a87a7b930e4aa1a417a02e804704128654690b592c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0abb667483cbe542145705a87a7b930e4aa1a417a02e804704128654690b592c"} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0abb667483cbe542145705a87a7b930e4aa1a417a02e804704128654690b592c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4bf38e580f3e43d6297130813c91d599a77b1b1c2932af4a87b336a542c3abd4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4bf38e580f3e43d6297130813c91d599a77b1b1c2932af4a87b336a542c3abd4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0d1d1805ea5a922a7a9028903072f74982c224ce3d799eadaeda7771dd6d8ea"} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4bf38e580f3e43d6297130813c91d599a77b1b1c2932af4a87b336a542c3abd4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0d1d1805ea5a922a7a9028903072f74982c224ce3d799eadaeda7771dd6d8ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0d1d1805ea5a922a7a9028903072f74982c224ce3d799eadaeda7771dd6d8ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0d1d1805ea5a922a7a9028903072f74982c224ce3d799eadaeda7771dd6d8ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0abb667483cbe542145705a87a7b930e4aa1a417a02e804704128654690b592c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0abb667483cbe542145705a87a7b930e4aa1a417a02e804704128654690b592c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4bf38e580f3e43d6297130813c91d599a77b1b1c2932af4a87b336a542c3abd4"} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0abb667483cbe542145705a87a7b930e4aa1a417a02e804704128654690b592c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4bf38e580f3e43d6297130813c91d599a77b1b1c2932af4a87b336a542c3abd4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7356af964aeb430ef153858e57cd2561b73fcc6d7c093266069fbeb278047d03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0abb667483cbe542145705a87a7b930e4aa1a417a02e804704128654690b592c"} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7356af964aeb430ef153858e57cd2561b73fcc6d7c093266069fbeb278047d03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0d1d1805ea5a922a7a9028903072f74982c224ce3d799eadaeda7771dd6d8ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91753b6da497c9d5438ae65389df2b77a157dc9693d70791d332b6f78c421376","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7356af964aeb430ef153858e57cd2561b73fcc6d7c093266069fbeb278047d03"} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91753b6da497c9d5438ae65389df2b77a157dc9693d70791d332b6f78c421376","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0abb667483cbe542145705a87a7b930e4aa1a417a02e804704128654690b592c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7356af964aeb430ef153858e57cd2561b73fcc6d7c093266069fbeb278047d03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7356af964aeb430ef153858e57cd2561b73fcc6d7c093266069fbeb278047d03"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7356af964aeb430ef153858e57cd2561b73fcc6d7c093266069fbeb278047d03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91753b6da497c9d5438ae65389df2b77a157dc9693d70791d332b6f78c421376","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7356af964aeb430ef153858e57cd2561b73fcc6d7c093266069fbeb278047d03","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4bf38e580f3e43d6297130813c91d599a77b1b1c2932af4a87b336a542c3abd4"} {"level":"debug","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91753b6da497c9d5438ae65389df2b77a157dc9693d70791d332b6f78c421376","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0d1d1805ea5a922a7a9028903072f74982c224ce3d799eadaeda7771dd6d8ea"} {"level":"debug","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91753b6da497c9d5438ae65389df2b77a157dc9693d70791d332b6f78c421376","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91753b6da497c9d5438ae65389df2b77a157dc9693d70791d332b6f78c421376","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1981cebd3412fe12b03f3c58fe7c235551ffb9fd6ad29da68be0632dcea4a03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91753b6da497c9d5438ae65389df2b77a157dc9693d70791d332b6f78c421376"} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1981cebd3412fe12b03f3c58fe7c235551ffb9fd6ad29da68be0632dcea4a03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91753b6da497c9d5438ae65389df2b77a157dc9693d70791d332b6f78c421376","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91753b6da497c9d5438ae65389df2b77a157dc9693d70791d332b6f78c421376"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0abb667483cbe542145705a87a7b930e4aa1a417a02e804704128654690b592c"} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91753b6da497c9d5438ae65389df2b77a157dc9693d70791d332b6f78c421376","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0eecaba8a76861b97be95ee4bc1bf4235953bed9240c617f782924139e171a94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7356af964aeb430ef153858e57cd2561b73fcc6d7c093266069fbeb278047d03"} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0eecaba8a76861b97be95ee4bc1bf4235953bed9240c617f782924139e171a94","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1981cebd3412fe12b03f3c58fe7c235551ffb9fd6ad29da68be0632dcea4a03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1981cebd3412fe12b03f3c58fe7c235551ffb9fd6ad29da68be0632dcea4a03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1981cebd3412fe12b03f3c58fe7c235551ffb9fd6ad29da68be0632dcea4a03"} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91753b6da497c9d5438ae65389df2b77a157dc9693d70791d332b6f78c421376","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91753b6da497c9d5438ae65389df2b77a157dc9693d70791d332b6f78c421376"} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91753b6da497c9d5438ae65389df2b77a157dc9693d70791d332b6f78c421376","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0801329723242f344c7421604204d856c17fa36a4d3b032b0d2a3fbab2d53f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0801329723242f344c7421604204d856c17fa36a4d3b032b0d2a3fbab2d53f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0eecaba8a76861b97be95ee4bc1bf4235953bed9240c617f782924139e171a94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0eecaba8a76861b97be95ee4bc1bf4235953bed9240c617f782924139e171a94"} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0eecaba8a76861b97be95ee4bc1bf4235953bed9240c617f782924139e171a94","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1981cebd3412fe12b03f3c58fe7c235551ffb9fd6ad29da68be0632dcea4a03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1981cebd3412fe12b03f3c58fe7c235551ffb9fd6ad29da68be0632dcea4a03"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782"} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1981cebd3412fe12b03f3c58fe7c235551ffb9fd6ad29da68be0632dcea4a03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91753b6da497c9d5438ae65389df2b77a157dc9693d70791d332b6f78c421376","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91753b6da497c9d5438ae65389df2b77a157dc9693d70791d332b6f78c421376"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0801329723242f344c7421604204d856c17fa36a4d3b032b0d2a3fbab2d53f2"} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1981cebd3412fe12b03f3c58fe7c235551ffb9fd6ad29da68be0632dcea4a03"} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91753b6da497c9d5438ae65389df2b77a157dc9693d70791d332b6f78c421376","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91753b6da497c9d5438ae65389df2b77a157dc9693d70791d332b6f78c421376"} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0801329723242f344c7421604204d856c17fa36a4d3b032b0d2a3fbab2d53f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0801329723242f344c7421604204d856c17fa36a4d3b032b0d2a3fbab2d53f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794"} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0801329723242f344c7421604204d856c17fa36a4d3b032b0d2a3fbab2d53f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc0232c3e97cb2e76672830440ec13514e41bccbbe90583ce3dfc74391451f02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc0232c3e97cb2e76672830440ec13514e41bccbbe90583ce3dfc74391451f02"} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0eecaba8a76861b97be95ee4bc1bf4235953bed9240c617f782924139e171a94"} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc0232c3e97cb2e76672830440ec13514e41bccbbe90583ce3dfc74391451f02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0eecaba8a76861b97be95ee4bc1bf4235953bed9240c617f782924139e171a94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0eecaba8a76861b97be95ee4bc1bf4235953bed9240c617f782924139e171a94"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782"} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/583afe5112f8e83fa8a86643d0c81673859abcef197ffd08765372f7c420b246"} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91753b6da497c9d5438ae65389df2b77a157dc9693d70791d332b6f78c421376"} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0eecaba8a76861b97be95ee4bc1bf4235953bed9240c617f782924139e171a94","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1981cebd3412fe12b03f3c58fe7c235551ffb9fd6ad29da68be0632dcea4a03","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91753b6da497c9d5438ae65389df2b77a157dc9693d70791d332b6f78c421376","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"583afe5112f8e83fa8a86643d0c81673859abcef197ffd08765372f7c420b246","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["583afe5112f8e83fa8a86643d0c81673859abcef197ffd08765372f7c420b246"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/865d2aae842759d5351e3f05808106b259facce561d712cb22b36d16474bf764"} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794"} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"583afe5112f8e83fa8a86643d0c81673859abcef197ffd08765372f7c420b246","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"865d2aae842759d5351e3f05808106b259facce561d712cb22b36d16474bf764","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["865d2aae842759d5351e3f05808106b259facce561d712cb22b36d16474bf764"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0801329723242f344c7421604204d856c17fa36a4d3b032b0d2a3fbab2d53f2"} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc0232c3e97cb2e76672830440ec13514e41bccbbe90583ce3dfc74391451f02"} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"865d2aae842759d5351e3f05808106b259facce561d712cb22b36d16474bf764","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:04:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0eecaba8a76861b97be95ee4bc1bf4235953bed9240c617f782924139e171a94"} {"level":"info","ts":"2026-07-22T03:04:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/583afe5112f8e83fa8a86643d0c81673859abcef197ffd08765372f7c420b246"} {"level":"info","ts":"2026-07-22T03:04:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/865d2aae842759d5351e3f05808106b259facce561d712cb22b36d16474bf764"} {"level":"info","ts":"2026-07-22T03:04:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0801329723242f344c7421604204d856c17fa36a4d3b032b0d2a3fbab2d53f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc0232c3e97cb2e76672830440ec13514e41bccbbe90583ce3dfc74391451f02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:04:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:04:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc0232c3e97cb2e76672830440ec13514e41bccbbe90583ce3dfc74391451f02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794"} {"level":"info","ts":"2026-07-22T03:04:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc0232c3e97cb2e76672830440ec13514e41bccbbe90583ce3dfc74391451f02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0eecaba8a76861b97be95ee4bc1bf4235953bed9240c617f782924139e171a94","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"583afe5112f8e83fa8a86643d0c81673859abcef197ffd08765372f7c420b246","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"865d2aae842759d5351e3f05808106b259facce561d712cb22b36d16474bf764","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc0232c3e97cb2e76672830440ec13514e41bccbbe90583ce3dfc74391451f02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc0232c3e97cb2e76672830440ec13514e41bccbbe90583ce3dfc74391451f02"} {"level":"info","ts":"2026-07-22T03:04:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc0232c3e97cb2e76672830440ec13514e41bccbbe90583ce3dfc74391451f02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc0232c3e97cb2e76672830440ec13514e41bccbbe90583ce3dfc74391451f02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc0232c3e97cb2e76672830440ec13514e41bccbbe90583ce3dfc74391451f02","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:04:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc0232c3e97cb2e76672830440ec13514e41bccbbe90583ce3dfc74391451f02"} {"level":"debug","ts":"2026-07-22T03:04:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc0232c3e97cb2e76672830440ec13514e41bccbbe90583ce3dfc74391451f02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:04:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:04:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc0232c3e97cb2e76672830440ec13514e41bccbbe90583ce3dfc74391451f02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc0232c3e97cb2e76672830440ec13514e41bccbbe90583ce3dfc74391451f02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc0232c3e97cb2e76672830440ec13514e41bccbbe90583ce3dfc74391451f02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc0232c3e97cb2e76672830440ec13514e41bccbbe90583ce3dfc74391451f02"} {"level":"info","ts":"2026-07-22T03:04:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc0232c3e97cb2e76672830440ec13514e41bccbbe90583ce3dfc74391451f02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc0232c3e97cb2e76672830440ec13514e41bccbbe90583ce3dfc74391451f02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc0232c3e97cb2e76672830440ec13514e41bccbbe90583ce3dfc74391451f02","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:04:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc0232c3e97cb2e76672830440ec13514e41bccbbe90583ce3dfc74391451f02"} {"level":"debug","ts":"2026-07-22T03:04:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc0232c3e97cb2e76672830440ec13514e41bccbbe90583ce3dfc74391451f02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:04:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:04:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc0232c3e97cb2e76672830440ec13514e41bccbbe90583ce3dfc74391451f02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc0232c3e97cb2e76672830440ec13514e41bccbbe90583ce3dfc74391451f02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc0232c3e97cb2e76672830440ec13514e41bccbbe90583ce3dfc74391451f02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:04:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:04:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc0232c3e97cb2e76672830440ec13514e41bccbbe90583ce3dfc74391451f02"} {"level":"info","ts":"2026-07-22T03:04:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc0232c3e97cb2e76672830440ec13514e41bccbbe90583ce3dfc74391451f02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc0232c3e97cb2e76672830440ec13514e41bccbbe90583ce3dfc74391451f02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:04:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:04:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc0232c3e97cb2e76672830440ec13514e41bccbbe90583ce3dfc74391451f02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc0232c3e97cb2e76672830440ec13514e41bccbbe90583ce3dfc74391451f02"} {"level":"info","ts":"2026-07-22T03:04:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc0232c3e97cb2e76672830440ec13514e41bccbbe90583ce3dfc74391451f02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc0232c3e97cb2e76672830440ec13514e41bccbbe90583ce3dfc74391451f02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:04:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:04:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc0232c3e97cb2e76672830440ec13514e41bccbbe90583ce3dfc74391451f02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:04:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc0232c3e97cb2e76672830440ec13514e41bccbbe90583ce3dfc74391451f02"} {"level":"error","ts":"2026-07-22T03:04:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"dc0232c3e97cb2e76672830440ec13514e41bccbbe90583ce3dfc74391451f02","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"dc0232c3e97cb2e76672830440ec13514e41bccbbe90583ce3dfc74391451f02\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T03:04:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc0232c3e97cb2e76672830440ec13514e41bccbbe90583ce3dfc74391451f02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:04:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc0232c3e97cb2e76672830440ec13514e41bccbbe90583ce3dfc74391451f02","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:04:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6e5e503d-8769-4472-a476-99377aa5d8e5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:56470","PortSpecifier":{"PortValue":56470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6e5e503d-8769-4472-a476-99377aa5d8e5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-995f8f.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T03:04:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6e5e503d-8769-4472-a476-99377aa5d8e5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:56470","PortSpecifier":{"PortValue":56470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784689485,"nanos":33257999},"http":{"id":"6e5e503d-8769-4472-a476-99377aa5d8e5","method":"POST","headers":{":authority":"e2e-shared-a-995f8f.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:04:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6e5e503d-8769-4472-a476-99377aa5d8e5","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T03:04:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6e5e503d-8769-4472-a476-99377aa5d8e5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1b8f5dc6-d648-43b5-a1c0-52422d83042f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6a1776ec-780a-4077-bf07-9fd8a76fea35"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa8b523815bc"]}} {"level":"debug","ts":"2026-07-22T03:04:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6e5e503d-8769-4472-a476-99377aa5d8e5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa8b523815bc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6a1776ec-780a-4077-bf07-9fd8a76fea35"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1b8f5dc6-d648-43b5-a1c0-52422d83042f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"30dc239e7db8f6679cbce36f1ceb0cd72fb7ecb5337fac0fb59890fcdf9687fd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-995f8f.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:04:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6e5e503d-8769-4472-a476-99377aa5d8e5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:04:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6e5e503d-8769-4472-a476-99377aa5d8e5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:04:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6e5e503d-8769-4472-a476-99377aa5d8e5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-995f8f/sub-test-model-995f8f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-995f8f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:04:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6e5e503d-8769-4472-a476-99377aa5d8e5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T03:04:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6e5e503d-8769-4472-a476-99377aa5d8e5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T03:04:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6e5e503d-8769-4472-a476-99377aa5d8e5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T03:04:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6e5e503d-8769-4472-a476-99377aa5d8e5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T03:04:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6e5e503d-8769-4472-a476-99377aa5d8e5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T03:04:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"82fbb070-f1b9-4f49-baa8-5289ac8c263e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:33620","PortSpecifier":{"PortValue":33620}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"82fbb070-f1b9-4f49-baa8-5289ac8c263e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-bb8c9d.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T03:04:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"82fbb070-f1b9-4f49-baa8-5289ac8c263e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:33620","PortSpecifier":{"PortValue":33620}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784689485,"nanos":77340102},"http":{"id":"82fbb070-f1b9-4f49-baa8-5289ac8c263e","method":"POST","headers":{":authority":"e2e-shared-b-bb8c9d.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:04:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"82fbb070-f1b9-4f49-baa8-5289ac8c263e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T03:04:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"82fbb070-f1b9-4f49-baa8-5289ac8c263e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1b8f5dc6-d648-43b5-a1c0-52422d83042f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6a1776ec-780a-4077-bf07-9fd8a76fea35"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa8b523815bc"]}} {"level":"debug","ts":"2026-07-22T03:04:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"82fbb070-f1b9-4f49-baa8-5289ac8c263e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa8b523815bc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6a1776ec-780a-4077-bf07-9fd8a76fea35"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1b8f5dc6-d648-43b5-a1c0-52422d83042f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-bb8c9d.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:04:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82fbb070-f1b9-4f49-baa8-5289ac8c263e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:04:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82fbb070-f1b9-4f49-baa8-5289ac8c263e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:04:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82fbb070-f1b9-4f49-baa8-5289ac8c263e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-bb8c9d/sub-test-model-bb8c9d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-bb8c9d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:04:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"82fbb070-f1b9-4f49-baa8-5289ac8c263e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T03:04:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82fbb070-f1b9-4f49-baa8-5289ac8c263e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T03:04:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82fbb070-f1b9-4f49-baa8-5289ac8c263e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T03:04:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"82fbb070-f1b9-4f49-baa8-5289ac8c263e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T03:04:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"82fbb070-f1b9-4f49-baa8-5289ac8c263e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T03:04:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b8a078bb-111c-4b27-b58f-5000009b5e35","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:56476","PortSpecifier":{"PortValue":56476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b8a078bb-111c-4b27-b58f-5000009b5e35","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-995f8f.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T03:04:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b8a078bb-111c-4b27-b58f-5000009b5e35","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:56476","PortSpecifier":{"PortValue":56476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784689485,"nanos":119904660},"http":{"id":"b8a078bb-111c-4b27-b58f-5000009b5e35","method":"POST","headers":{":authority":"e2e-shared-a-995f8f.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:04:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b8a078bb-111c-4b27-b58f-5000009b5e35","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Yq1tw3xnfC6NNEoE_HiMO7fFNM4QAzA8IW3DgDRDuRnqGYjG8Vz5CPJyUrI2"} {"level":"debug","ts":"2026-07-22T03:04:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b8a078bb-111c-4b27-b58f-5000009b5e35","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-995f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Yq1tw3xnfC6NNEoE_HiMO7fFNM4QAzA8IW3DgDRDuRnqGYjG8Vz5CPJyUrI2\"}"} {"level":"debug","ts":"2026-07-22T03:04:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b8a078bb-111c-4b27-b58f-5000009b5e35","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-995f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d31f13b8-76fb-484f-bf89-860ab0e890e4","keyName":"e2e-sub-iso-599e06","subscription":"e2e-shared-sub-3fa8b4","tenant":"e2e-shared-a-995f8f","userId":"d31f13b8-76fb-484f-bf89-860ab0e890e4","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T03:04:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b8a078bb-111c-4b27-b58f-5000009b5e35","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:04:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8a078bb-111c-4b27-b58f-5000009b5e35","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:04:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8a078bb-111c-4b27-b58f-5000009b5e35","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:04:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8a078bb-111c-4b27-b58f-5000009b5e35","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-995f8f/sub-test-model-995f8f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-995f8f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:04:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b8a078bb-111c-4b27-b58f-5000009b5e35","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T03:04:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b8a078bb-111c-4b27-b58f-5000009b5e35","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T03:04:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b8a078bb-111c-4b27-b58f-5000009b5e35","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-3fa8b4"} {"level":"debug","ts":"2026-07-22T03:04:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b8a078bb-111c-4b27-b58f-5000009b5e35","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-22T03:04:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b8a078bb-111c-4b27-b58f-5000009b5e35","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T03:04:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b8a078bb-111c-4b27-b58f-5000009b5e35","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T03:04:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"53109def-4ec2-4129-84bc-038601aa988e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:33632","PortSpecifier":{"PortValue":33632}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"53109def-4ec2-4129-84bc-038601aa988e","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-bb8c9d.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T03:04:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"53109def-4ec2-4129-84bc-038601aa988e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:33632","PortSpecifier":{"PortValue":33632}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784689485,"nanos":154678939},"http":{"id":"53109def-4ec2-4129-84bc-038601aa988e","method":"POST","headers":{":authority":"e2e-shared-b-bb8c9d.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:04:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"53109def-4ec2-4129-84bc-038601aa988e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-19bw0Y4zYjtawmlhh_Gj0YlT8jEaxdQaERFlF0Az6SRa3TFYP3ZrQbhB0U9uY"} {"level":"debug","ts":"2026-07-22T03:04:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"53109def-4ec2-4129-84bc-038601aa988e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-bb8c9d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-19bw0Y4zYjtawmlhh_Gj0YlT8jEaxdQaERFlF0Az6SRa3TFYP3ZrQbhB0U9uY\"}"} {"level":"debug","ts":"2026-07-22T03:04:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"53109def-4ec2-4129-84bc-038601aa988e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-bb8c9d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c6e975e3-a26f-47a9-9b7a-3fcffdb2832e","keyName":"e2e-sub-iso-673d27","subscription":"e2e-shared-sub-3fa8b4","tenant":"e2e-shared-b-bb8c9d","userId":"c6e975e3-a26f-47a9-9b7a-3fcffdb2832e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T03:04:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"53109def-4ec2-4129-84bc-038601aa988e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:04:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53109def-4ec2-4129-84bc-038601aa988e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:04:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53109def-4ec2-4129-84bc-038601aa988e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:04:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53109def-4ec2-4129-84bc-038601aa988e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-bb8c9d/sub-test-model-bb8c9d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-bb8c9d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:04:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"53109def-4ec2-4129-84bc-038601aa988e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T03:04:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"53109def-4ec2-4129-84bc-038601aa988e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-3fa8b4"} {"level":"debug","ts":"2026-07-22T03:04:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"53109def-4ec2-4129-84bc-038601aa988e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-22T03:04:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"53109def-4ec2-4129-84bc-038601aa988e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T03:04:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"53109def-4ec2-4129-84bc-038601aa988e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T03:04:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"53109def-4ec2-4129-84bc-038601aa988e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T03:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e03993692b2642c385f0fb625782884a7d27c7d8649875c6eac67ce74440126b"} {"level":"info","ts":"2026-07-22T03:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/583afe5112f8e83fa8a86643d0c81673859abcef197ffd08765372f7c420b246"} {"level":"info","ts":"2026-07-22T03:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4bf38e580f3e43d6297130813c91d599a77b1b1c2932af4a87b336a542c3abd4"} {"level":"info","ts":"2026-07-22T03:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f1981cebd3412fe12b03f3c58fe7c235551ffb9fd6ad29da68be0632dcea4a03"} {"level":"info","ts":"2026-07-22T03:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5d7299f602df90f3bc5ef9e12ac0fb2c42a886532fa31bd5e084601705895ce7"} {"level":"info","ts":"2026-07-22T03:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b0d1d1805ea5a922a7a9028903072f74982c224ce3d799eadaeda7771dd6d8ea"} {"level":"info","ts":"2026-07-22T03:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7356af964aeb430ef153858e57cd2561b73fcc6d7c093266069fbeb278047d03"} {"level":"info","ts":"2026-07-22T03:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/91753b6da497c9d5438ae65389df2b77a157dc9693d70791d332b6f78c421376"} {"level":"info","ts":"2026-07-22T03:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ed1a3d669bc844dd6cdb37e838fc633f618239b117b1012a19db16748b1ffea6"} {"level":"info","ts":"2026-07-22T03:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5f68121580a72b47e1fbb621248b2bf0d6c2f0c50783698829b1fa09104cc9b0"} {"level":"info","ts":"2026-07-22T03:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/865d2aae842759d5351e3f05808106b259facce561d712cb22b36d16474bf764"} {"level":"info","ts":"2026-07-22T03:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0abb667483cbe542145705a87a7b930e4aa1a417a02e804704128654690b592c"} {"level":"info","ts":"2026-07-22T03:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dc0232c3e97cb2e76672830440ec13514e41bccbbe90583ce3dfc74391451f02"} {"level":"info","ts":"2026-07-22T03:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3d2060773ae979d78ee8b5791d1ef20accec45cc0a9ce82c022cf444af5b0a8b"} {"level":"info","ts":"2026-07-22T03:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794"} {"level":"info","ts":"2026-07-22T03:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e35b183337334de8c3ba6c98f0fcda7c45d143b7c75467db06714276be920296"} {"level":"info","ts":"2026-07-22T03:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0eecaba8a76861b97be95ee4bc1bf4235953bed9240c617f782924139e171a94"} {"level":"info","ts":"2026-07-22T03:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/30dc239e7db8f6679cbce36f1ceb0cd72fb7ecb5337fac0fb59890fcdf9687fd"} {"level":"info","ts":"2026-07-22T03:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d1ea5d177f6054767535a590ed26a0cd4c9e509b82b939706a8433f2b592e55b"} {"level":"info","ts":"2026-07-22T03:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b0801329723242f344c7421604204d856c17fa36a4d3b032b0d2a3fbab2d53f2"} {"level":"info","ts":"2026-07-22T03:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0eb85996ca32715192fa0d8945eb09279781286ecba24deec976aea18348acd8"} {"level":"info","ts":"2026-07-22T03:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac"} {"level":"info","ts":"2026-07-22T03:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd"} {"level":"info","ts":"2026-07-22T03:04:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782"} {"level":"debug","ts":"2026-07-22T03:05:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"705ee6a08c838d5eb231e807da03335aefc9a3911c24cdca159125fb09930d52","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:05:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:05:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:05:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/705ee6a08c838d5eb231e807da03335aefc9a3911c24cdca159125fb09930d52"} {"level":"info","ts":"2026-07-22T03:05:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"705ee6a08c838d5eb231e807da03335aefc9a3911c24cdca159125fb09930d52","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"705ee6a08c838d5eb231e807da03335aefc9a3911c24cdca159125fb09930d52","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:05:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:05:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["705ee6a08c838d5eb231e807da03335aefc9a3911c24cdca159125fb09930d52"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-22T03:05:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"705ee6a08c838d5eb231e807da03335aefc9a3911c24cdca159125fb09930d52","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"705ee6a08c838d5eb231e807da03335aefc9a3911c24cdca159125fb09930d52\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T03:05:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"705ee6a08c838d5eb231e807da03335aefc9a3911c24cdca159125fb09930d52","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:05:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/705ee6a08c838d5eb231e807da03335aefc9a3911c24cdca159125fb09930d52"} {"level":"debug","ts":"2026-07-22T03:05:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"705ee6a08c838d5eb231e807da03335aefc9a3911c24cdca159125fb09930d52","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:05:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:05:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["705ee6a08c838d5eb231e807da03335aefc9a3911c24cdca159125fb09930d52"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:05:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"705ee6a08c838d5eb231e807da03335aefc9a3911c24cdca159125fb09930d52","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"705ee6a08c838d5eb231e807da03335aefc9a3911c24cdca159125fb09930d52","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e45a5a77b438d6bc22db4cce98bb5898db4e5646f636a61c30e9fd7cbfe4bded","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:05:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:05:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/705ee6a08c838d5eb231e807da03335aefc9a3911c24cdca159125fb09930d52"} {"level":"info","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e45a5a77b438d6bc22db4cce98bb5898db4e5646f636a61c30e9fd7cbfe4bded","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e45a5a77b438d6bc22db4cce98bb5898db4e5646f636a61c30e9fd7cbfe4bded","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:05:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:05:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e45a5a77b438d6bc22db4cce98bb5898db4e5646f636a61c30e9fd7cbfe4bded"} {"level":"info","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e45a5a77b438d6bc22db4cce98bb5898db4e5646f636a61c30e9fd7cbfe4bded"} {"level":"info","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e45a5a77b438d6bc22db4cce98bb5898db4e5646f636a61c30e9fd7cbfe4bded","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e45a5a77b438d6bc22db4cce98bb5898db4e5646f636a61c30e9fd7cbfe4bded","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:05:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:05:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e45a5a77b438d6bc22db4cce98bb5898db4e5646f636a61c30e9fd7cbfe4bded"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e45a5a77b438d6bc22db4cce98bb5898db4e5646f636a61c30e9fd7cbfe4bded","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e45a5a77b438d6bc22db4cce98bb5898db4e5646f636a61c30e9fd7cbfe4bded\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e45a5a77b438d6bc22db4cce98bb5898db4e5646f636a61c30e9fd7cbfe4bded","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e45a5a77b438d6bc22db4cce98bb5898db4e5646f636a61c30e9fd7cbfe4bded"} {"level":"debug","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e45a5a77b438d6bc22db4cce98bb5898db4e5646f636a61c30e9fd7cbfe4bded","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:05:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:05:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e45a5a77b438d6bc22db4cce98bb5898db4e5646f636a61c30e9fd7cbfe4bded"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e45a5a77b438d6bc22db4cce98bb5898db4e5646f636a61c30e9fd7cbfe4bded","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af44dfe3283f41ea0bcdff4de73898683f754ab62f34a1f235562f4b306c7913","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:05:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:05:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af44dfe3283f41ea0bcdff4de73898683f754ab62f34a1f235562f4b306c7913","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e45a5a77b438d6bc22db4cce98bb5898db4e5646f636a61c30e9fd7cbfe4bded","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af44dfe3283f41ea0bcdff4de73898683f754ab62f34a1f235562f4b306c7913"} {"level":"debug","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af44dfe3283f41ea0bcdff4de73898683f754ab62f34a1f235562f4b306c7913","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:05:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:05:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af44dfe3283f41ea0bcdff4de73898683f754ab62f34a1f235562f4b306c7913"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af44dfe3283f41ea0bcdff4de73898683f754ab62f34a1f235562f4b306c7913","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af44dfe3283f41ea0bcdff4de73898683f754ab62f34a1f235562f4b306c7913","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:05:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:05:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af44dfe3283f41ea0bcdff4de73898683f754ab62f34a1f235562f4b306c7913"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e45a5a77b438d6bc22db4cce98bb5898db4e5646f636a61c30e9fd7cbfe4bded"} {"level":"error","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"af44dfe3283f41ea0bcdff4de73898683f754ab62f34a1f235562f4b306c7913","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"af44dfe3283f41ea0bcdff4de73898683f754ab62f34a1f235562f4b306c7913\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af44dfe3283f41ea0bcdff4de73898683f754ab62f34a1f235562f4b306c7913","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:05:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:05:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af44dfe3283f41ea0bcdff4de73898683f754ab62f34a1f235562f4b306c7913","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af44dfe3283f41ea0bcdff4de73898683f754ab62f34a1f235562f4b306c7913","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:05:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:05:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af44dfe3283f41ea0bcdff4de73898683f754ab62f34a1f235562f4b306c7913"} {"level":"error","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"af44dfe3283f41ea0bcdff4de73898683f754ab62f34a1f235562f4b306c7913","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"af44dfe3283f41ea0bcdff4de73898683f754ab62f34a1f235562f4b306c7913\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af44dfe3283f41ea0bcdff4de73898683f754ab62f34a1f235562f4b306c7913","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af44dfe3283f41ea0bcdff4de73898683f754ab62f34a1f235562f4b306c7913","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af44dfe3283f41ea0bcdff4de73898683f754ab62f34a1f235562f4b306c7913"} {"level":"debug","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af44dfe3283f41ea0bcdff4de73898683f754ab62f34a1f235562f4b306c7913","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:05:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:05:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af44dfe3283f41ea0bcdff4de73898683f754ab62f34a1f235562f4b306c7913"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af44dfe3283f41ea0bcdff4de73898683f754ab62f34a1f235562f4b306c7913","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af44dfe3283f41ea0bcdff4de73898683f754ab62f34a1f235562f4b306c7913","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d7299f602df90f3bc5ef9e12ac0fb2c42a886532fa31bd5e084601705895ce7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:05:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:05:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af44dfe3283f41ea0bcdff4de73898683f754ab62f34a1f235562f4b306c7913"} {"level":"info","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d7299f602df90f3bc5ef9e12ac0fb2c42a886532fa31bd5e084601705895ce7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d7299f602df90f3bc5ef9e12ac0fb2c42a886532fa31bd5e084601705895ce7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:05:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:05:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d7299f602df90f3bc5ef9e12ac0fb2c42a886532fa31bd5e084601705895ce7"} {"level":"info","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d7299f602df90f3bc5ef9e12ac0fb2c42a886532fa31bd5e084601705895ce7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d7299f602df90f3bc5ef9e12ac0fb2c42a886532fa31bd5e084601705895ce7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:05:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:05:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5d7299f602df90f3bc5ef9e12ac0fb2c42a886532fa31bd5e084601705895ce7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5d7299f602df90f3bc5ef9e12ac0fb2c42a886532fa31bd5e084601705895ce7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d7299f602df90f3bc5ef9e12ac0fb2c42a886532fa31bd5e084601705895ce7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d7299f602df90f3bc5ef9e12ac0fb2c42a886532fa31bd5e084601705895ce7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d7299f602df90f3bc5ef9e12ac0fb2c42a886532fa31bd5e084601705895ce7"} {"level":"info","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d7299f602df90f3bc5ef9e12ac0fb2c42a886532fa31bd5e084601705895ce7"} {"level":"debug","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c6afb4bc24d9150b829ad2d4dacb34635c90495fa60a4c87f03fabd165e5107","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:05:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:05:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c6afb4bc24d9150b829ad2d4dacb34635c90495fa60a4c87f03fabd165e5107","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c6afb4bc24d9150b829ad2d4dacb34635c90495fa60a4c87f03fabd165e5107","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:05:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:05:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c6afb4bc24d9150b829ad2d4dacb34635c90495fa60a4c87f03fabd165e5107"} {"level":"info","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c6afb4bc24d9150b829ad2d4dacb34635c90495fa60a4c87f03fabd165e5107","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d7299f602df90f3bc5ef9e12ac0fb2c42a886532fa31bd5e084601705895ce7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:05:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:05:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d7299f602df90f3bc5ef9e12ac0fb2c42a886532fa31bd5e084601705895ce7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c6afb4bc24d9150b829ad2d4dacb34635c90495fa60a4c87f03fabd165e5107"} {"level":"info","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d7299f602df90f3bc5ef9e12ac0fb2c42a886532fa31bd5e084601705895ce7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c6afb4bc24d9150b829ad2d4dacb34635c90495fa60a4c87f03fabd165e5107","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d7299f602df90f3bc5ef9e12ac0fb2c42a886532fa31bd5e084601705895ce7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c6afb4bc24d9150b829ad2d4dacb34635c90495fa60a4c87f03fabd165e5107","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c6afb4bc24d9150b829ad2d4dacb34635c90495fa60a4c87f03fabd165e5107"} {"level":"debug","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30dc239e7db8f6679cbce36f1ceb0cd72fb7ecb5337fac0fb59890fcdf9687fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:05:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:05:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30dc239e7db8f6679cbce36f1ceb0cd72fb7ecb5337fac0fb59890fcdf9687fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c6afb4bc24d9150b829ad2d4dacb34635c90495fa60a4c87f03fabd165e5107","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:05:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:05:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c6afb4bc24d9150b829ad2d4dacb34635c90495fa60a4c87f03fabd165e5107"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d7299f602df90f3bc5ef9e12ac0fb2c42a886532fa31bd5e084601705895ce7"} {"level":"info","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c6afb4bc24d9150b829ad2d4dacb34635c90495fa60a4c87f03fabd165e5107","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30dc239e7db8f6679cbce36f1ceb0cd72fb7ecb5337fac0fb59890fcdf9687fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:05:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:05:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30dc239e7db8f6679cbce36f1ceb0cd72fb7ecb5337fac0fb59890fcdf9687fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c6afb4bc24d9150b829ad2d4dacb34635c90495fa60a4c87f03fabd165e5107","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30dc239e7db8f6679cbce36f1ceb0cd72fb7ecb5337fac0fb59890fcdf9687fd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30dc239e7db8f6679cbce36f1ceb0cd72fb7ecb5337fac0fb59890fcdf9687fd"} {"level":"debug","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30dc239e7db8f6679cbce36f1ceb0cd72fb7ecb5337fac0fb59890fcdf9687fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:05:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:05:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30dc239e7db8f6679cbce36f1ceb0cd72fb7ecb5337fac0fb59890fcdf9687fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30dc239e7db8f6679cbce36f1ceb0cd72fb7ecb5337fac0fb59890fcdf9687fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30dc239e7db8f6679cbce36f1ceb0cd72fb7ecb5337fac0fb59890fcdf9687fd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c6afb4bc24d9150b829ad2d4dacb34635c90495fa60a4c87f03fabd165e5107"} {"level":"debug","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e039e86f20fab5827661d08e82305dcb490760be9fd2912ebd7e3477853d8907","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:05:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:05:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30dc239e7db8f6679cbce36f1ceb0cd72fb7ecb5337fac0fb59890fcdf9687fd"} {"level":"info","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e039e86f20fab5827661d08e82305dcb490760be9fd2912ebd7e3477853d8907","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e039e86f20fab5827661d08e82305dcb490760be9fd2912ebd7e3477853d8907","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:05:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:05:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e039e86f20fab5827661d08e82305dcb490760be9fd2912ebd7e3477853d8907"} {"level":"info","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e039e86f20fab5827661d08e82305dcb490760be9fd2912ebd7e3477853d8907","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e039e86f20fab5827661d08e82305dcb490760be9fd2912ebd7e3477853d8907","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:05:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:05:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e039e86f20fab5827661d08e82305dcb490760be9fd2912ebd7e3477853d8907","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e039e86f20fab5827661d08e82305dcb490760be9fd2912ebd7e3477853d8907\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e039e86f20fab5827661d08e82305dcb490760be9fd2912ebd7e3477853d8907","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e039e86f20fab5827661d08e82305dcb490760be9fd2912ebd7e3477853d8907","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e039e86f20fab5827661d08e82305dcb490760be9fd2912ebd7e3477853d8907"} {"level":"info","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e039e86f20fab5827661d08e82305dcb490760be9fd2912ebd7e3477853d8907"} {"level":"debug","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91753b6da497c9d5438ae65389df2b77a157dc9693d70791d332b6f78c421376","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:05:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:05:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91753b6da497c9d5438ae65389df2b77a157dc9693d70791d332b6f78c421376","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0d1d1805ea5a922a7a9028903072f74982c224ce3d799eadaeda7771dd6d8ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:05:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:05:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91753b6da497c9d5438ae65389df2b77a157dc9693d70791d332b6f78c421376"} {"level":"info","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0d1d1805ea5a922a7a9028903072f74982c224ce3d799eadaeda7771dd6d8ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91753b6da497c9d5438ae65389df2b77a157dc9693d70791d332b6f78c421376","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:05:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:05:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91753b6da497c9d5438ae65389df2b77a157dc9693d70791d332b6f78c421376"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0d1d1805ea5a922a7a9028903072f74982c224ce3d799eadaeda7771dd6d8ea"} {"level":"info","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91753b6da497c9d5438ae65389df2b77a157dc9693d70791d332b6f78c421376","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e039e86f20fab5827661d08e82305dcb490760be9fd2912ebd7e3477853d8907","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:05:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:05:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e039e86f20fab5827661d08e82305dcb490760be9fd2912ebd7e3477853d8907"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e039e86f20fab5827661d08e82305dcb490760be9fd2912ebd7e3477853d8907","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0d1d1805ea5a922a7a9028903072f74982c224ce3d799eadaeda7771dd6d8ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:05:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:05:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0d1d1805ea5a922a7a9028903072f74982c224ce3d799eadaeda7771dd6d8ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91753b6da497c9d5438ae65389df2b77a157dc9693d70791d332b6f78c421376"} {"level":"info","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0d1d1805ea5a922a7a9028903072f74982c224ce3d799eadaeda7771dd6d8ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91753b6da497c9d5438ae65389df2b77a157dc9693d70791d332b6f78c421376","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e039e86f20fab5827661d08e82305dcb490760be9fd2912ebd7e3477853d8907","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0d1d1805ea5a922a7a9028903072f74982c224ce3d799eadaeda7771dd6d8ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:05:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:05:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0d1d1805ea5a922a7a9028903072f74982c224ce3d799eadaeda7771dd6d8ea"} {"level":"info","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0d1d1805ea5a922a7a9028903072f74982c224ce3d799eadaeda7771dd6d8ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0d1d1805ea5a922a7a9028903072f74982c224ce3d799eadaeda7771dd6d8ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:05:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:05:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0d1d1805ea5a922a7a9028903072f74982c224ce3d799eadaeda7771dd6d8ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0d1d1805ea5a922a7a9028903072f74982c224ce3d799eadaeda7771dd6d8ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0d1d1805ea5a922a7a9028903072f74982c224ce3d799eadaeda7771dd6d8ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:05:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:05:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0d1d1805ea5a922a7a9028903072f74982c224ce3d799eadaeda7771dd6d8ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b0d1d1805ea5a922a7a9028903072f74982c224ce3d799eadaeda7771dd6d8ea","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b0d1d1805ea5a922a7a9028903072f74982c224ce3d799eadaeda7771dd6d8ea\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0d1d1805ea5a922a7a9028903072f74982c224ce3d799eadaeda7771dd6d8ea","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e039e86f20fab5827661d08e82305dcb490760be9fd2912ebd7e3477853d8907"} {"level":"debug","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0d1d1805ea5a922a7a9028903072f74982c224ce3d799eadaeda7771dd6d8ea","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91753b6da497c9d5438ae65389df2b77a157dc9693d70791d332b6f78c421376"} {"level":"info","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0d1d1805ea5a922a7a9028903072f74982c224ce3d799eadaeda7771dd6d8ea"} {"level":"debug","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:05:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:05:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a0b511727e3d23635693f734f9dff87ec9be55864a50c17745cf904ab18b77a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:05:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:05:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd"} {"level":"info","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a0b511727e3d23635693f734f9dff87ec9be55864a50c17745cf904ab18b77a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:05:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:05:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"834211e6b83ad4d182fbafb8e2d10a37942cc5a25b6333ad5b426c6764e18936","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:05:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:05:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a0b511727e3d23635693f734f9dff87ec9be55864a50c17745cf904ab18b77a"} {"level":"info","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"834211e6b83ad4d182fbafb8e2d10a37942cc5a25b6333ad5b426c6764e18936","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a0b511727e3d23635693f734f9dff87ec9be55864a50c17745cf904ab18b77a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:05:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:05:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a0b511727e3d23635693f734f9dff87ec9be55864a50c17745cf904ab18b77a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd"} {"level":"info","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a0b511727e3d23635693f734f9dff87ec9be55864a50c17745cf904ab18b77a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"834211e6b83ad4d182fbafb8e2d10a37942cc5a25b6333ad5b426c6764e18936","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:05:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:05:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"834211e6b83ad4d182fbafb8e2d10a37942cc5a25b6333ad5b426c6764e18936","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a0b511727e3d23635693f734f9dff87ec9be55864a50c17745cf904ab18b77a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"834211e6b83ad4d182fbafb8e2d10a37942cc5a25b6333ad5b426c6764e18936","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/834211e6b83ad4d182fbafb8e2d10a37942cc5a25b6333ad5b426c6764e18936"} {"level":"debug","ts":"2026-07-22T03:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"834211e6b83ad4d182fbafb8e2d10a37942cc5a25b6333ad5b426c6764e18936","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:05:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:05:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["834211e6b83ad4d182fbafb8e2d10a37942cc5a25b6333ad5b426c6764e18936"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"834211e6b83ad4d182fbafb8e2d10a37942cc5a25b6333ad5b426c6764e18936","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"069ca05440229769b3a48eb0cf59568839d6ea1bc60022961581829088ada136","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:05:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:05:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a0b511727e3d23635693f734f9dff87ec9be55864a50c17745cf904ab18b77a"} {"level":"info","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"069ca05440229769b3a48eb0cf59568839d6ea1bc60022961581829088ada136","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"834211e6b83ad4d182fbafb8e2d10a37942cc5a25b6333ad5b426c6764e18936","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:05:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:05:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"834211e6b83ad4d182fbafb8e2d10a37942cc5a25b6333ad5b426c6764e18936","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c40838a2a57a518af0ab9f76f3dfeff3ddd11b3e58744e94f65d4a971142ab95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:05:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:05:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/834211e6b83ad4d182fbafb8e2d10a37942cc5a25b6333ad5b426c6764e18936"} {"level":"info","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c40838a2a57a518af0ab9f76f3dfeff3ddd11b3e58744e94f65d4a971142ab95","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"069ca05440229769b3a48eb0cf59568839d6ea1bc60022961581829088ada136","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:05:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:05:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/069ca05440229769b3a48eb0cf59568839d6ea1bc60022961581829088ada136"} {"level":"info","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"069ca05440229769b3a48eb0cf59568839d6ea1bc60022961581829088ada136","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"834211e6b83ad4d182fbafb8e2d10a37942cc5a25b6333ad5b426c6764e18936","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:05:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:05:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["834211e6b83ad4d182fbafb8e2d10a37942cc5a25b6333ad5b426c6764e18936"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c40838a2a57a518af0ab9f76f3dfeff3ddd11b3e58744e94f65d4a971142ab95"} {"level":"info","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"834211e6b83ad4d182fbafb8e2d10a37942cc5a25b6333ad5b426c6764e18936","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c40838a2a57a518af0ab9f76f3dfeff3ddd11b3e58744e94f65d4a971142ab95","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:05:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:05:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c40838a2a57a518af0ab9f76f3dfeff3ddd11b3e58744e94f65d4a971142ab95"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c40838a2a57a518af0ab9f76f3dfeff3ddd11b3e58744e94f65d4a971142ab95","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"069ca05440229769b3a48eb0cf59568839d6ea1bc60022961581829088ada136","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:05:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:05:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["069ca05440229769b3a48eb0cf59568839d6ea1bc60022961581829088ada136"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/834211e6b83ad4d182fbafb8e2d10a37942cc5a25b6333ad5b426c6764e18936"} {"level":"info","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"069ca05440229769b3a48eb0cf59568839d6ea1bc60022961581829088ada136","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"834211e6b83ad4d182fbafb8e2d10a37942cc5a25b6333ad5b426c6764e18936","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c40838a2a57a518af0ab9f76f3dfeff3ddd11b3e58744e94f65d4a971142ab95","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:05:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:05:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/069ca05440229769b3a48eb0cf59568839d6ea1bc60022961581829088ada136"} {"level":"info","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"069ca05440229769b3a48eb0cf59568839d6ea1bc60022961581829088ada136","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:05:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:05:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70c832ac479b08adbaba131a0da3b55cf761fdd5979565c59822a197e953ad3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:05:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:05:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c40838a2a57a518af0ab9f76f3dfeff3ddd11b3e58744e94f65d4a971142ab95"} {"level":"info","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70c832ac479b08adbaba131a0da3b55cf761fdd5979565c59822a197e953ad3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9121d008e4382a17015a2c8e49405e32e18a3f8cedd0a5406d1fb433880543f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:05:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:05:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/834211e6b83ad4d182fbafb8e2d10a37942cc5a25b6333ad5b426c6764e18936"} {"level":"info","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9121d008e4382a17015a2c8e49405e32e18a3f8cedd0a5406d1fb433880543f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:05:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:05:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70c832ac479b08adbaba131a0da3b55cf761fdd5979565c59822a197e953ad3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9121d008e4382a17015a2c8e49405e32e18a3f8cedd0a5406d1fb433880543f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794"} {"level":"debug","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70c832ac479b08adbaba131a0da3b55cf761fdd5979565c59822a197e953ad3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9121d008e4382a17015a2c8e49405e32e18a3f8cedd0a5406d1fb433880543f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:05:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:05:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782"} {"level":"info","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:05:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:05:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/069ca05440229769b3a48eb0cf59568839d6ea1bc60022961581829088ada136"} {"level":"info","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f98447b21f0b8640db8b49755ea6ed16a536100c5bdfdc0edd9aef2c93414412","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:05:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:05:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f98447b21f0b8640db8b49755ea6ed16a536100c5bdfdc0edd9aef2c93414412","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70c832ac479b08adbaba131a0da3b55cf761fdd5979565c59822a197e953ad3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T03:05:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T03:05:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70c832ac479b08adbaba131a0da3b55cf761fdd5979565c59822a197e953ad3d"} {"level":"info","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9121d008e4382a17015a2c8e49405e32e18a3f8cedd0a5406d1fb433880543f"} {"level":"info","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794"} {"level":"info","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70c832ac479b08adbaba131a0da3b55cf761fdd5979565c59822a197e953ad3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9121d008e4382a17015a2c8e49405e32e18a3f8cedd0a5406d1fb433880543f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:05:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:05:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9121d008e4382a17015a2c8e49405e32e18a3f8cedd0a5406d1fb433880543f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f98447b21f0b8640db8b49755ea6ed16a536100c5bdfdc0edd9aef2c93414412"} {"level":"info","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f4f978adc0d4532ec8f9b722a2b6aab306d5ff0f17dbdc24cc9130e1e2d5336"} {"level":"info","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9121d008e4382a17015a2c8e49405e32e18a3f8cedd0a5406d1fb433880543f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f4f978adc0d4532ec8f9b722a2b6aab306d5ff0f17dbdc24cc9130e1e2d5336","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:05:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:05:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f4f978adc0d4532ec8f9b722a2b6aab306d5ff0f17dbdc24cc9130e1e2d5336"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782"} {"level":"info","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/feea94b3265a8b6737154164635852eeaa535e20f8fbacb1460a2b36c6230096"} {"level":"info","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f4f978adc0d4532ec8f9b722a2b6aab306d5ff0f17dbdc24cc9130e1e2d5336","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"feea94b3265a8b6737154164635852eeaa535e20f8fbacb1460a2b36c6230096","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:05:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:05:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["feea94b3265a8b6737154164635852eeaa535e20f8fbacb1460a2b36c6230096"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70c832ac479b08adbaba131a0da3b55cf761fdd5979565c59822a197e953ad3d"} {"level":"info","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"feea94b3265a8b6737154164635852eeaa535e20f8fbacb1460a2b36c6230096","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f98447b21f0b8640db8b49755ea6ed16a536100c5bdfdc0edd9aef2c93414412","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:05:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:05:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f98447b21f0b8640db8b49755ea6ed16a536100c5bdfdc0edd9aef2c93414412"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac"} {"level":"info","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5d2dd4266381109da272d931053838c5dbd3edd9253d404bd96e24ca174eace"} {"level":"info","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f98447b21f0b8640db8b49755ea6ed16a536100c5bdfdc0edd9aef2c93414412","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70c832ac479b08adbaba131a0da3b55cf761fdd5979565c59822a197e953ad3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:05:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:05:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70c832ac479b08adbaba131a0da3b55cf761fdd5979565c59822a197e953ad3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74edd99d9c699b77c60c1e29f1b458f1646cdb628d68416c189cd8f072f92123"} {"level":"info","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9121d008e4382a17015a2c8e49405e32e18a3f8cedd0a5406d1fb433880543f"} {"level":"info","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70c832ac479b08adbaba131a0da3b55cf761fdd5979565c59822a197e953ad3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:05:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:05:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f4f978adc0d4532ec8f9b722a2b6aab306d5ff0f17dbdc24cc9130e1e2d5336"} {"level":"info","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/feea94b3265a8b6737154164635852eeaa535e20f8fbacb1460a2b36c6230096"} {"level":"info","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5d2dd4266381109da272d931053838c5dbd3edd9253d404bd96e24ca174eace","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:05:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:05:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5d2dd4266381109da272d931053838c5dbd3edd9253d404bd96e24ca174eace"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f98447b21f0b8640db8b49755ea6ed16a536100c5bdfdc0edd9aef2c93414412"} {"level":"info","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70c832ac479b08adbaba131a0da3b55cf761fdd5979565c59822a197e953ad3d"} {"level":"info","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5d2dd4266381109da272d931053838c5dbd3edd9253d404bd96e24ca174eace","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74edd99d9c699b77c60c1e29f1b458f1646cdb628d68416c189cd8f072f92123","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T03:05:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T03:05:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74edd99d9c699b77c60c1e29f1b458f1646cdb628d68416c189cd8f072f92123"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac"} {"level":"info","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5d2dd4266381109da272d931053838c5dbd3edd9253d404bd96e24ca174eace"} {"level":"info","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74edd99d9c699b77c60c1e29f1b458f1646cdb628d68416c189cd8f072f92123","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9121d008e4382a17015a2c8e49405e32e18a3f8cedd0a5406d1fb433880543f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f4f978adc0d4532ec8f9b722a2b6aab306d5ff0f17dbdc24cc9130e1e2d5336","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"feea94b3265a8b6737154164635852eeaa535e20f8fbacb1460a2b36c6230096","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f98447b21f0b8640db8b49755ea6ed16a536100c5bdfdc0edd9aef2c93414412","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70c832ac479b08adbaba131a0da3b55cf761fdd5979565c59822a197e953ad3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5d2dd4266381109da272d931053838c5dbd3edd9253d404bd96e24ca174eace","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74edd99d9c699b77c60c1e29f1b458f1646cdb628d68416c189cd8f072f92123","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T03:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74edd99d9c699b77c60c1e29f1b458f1646cdb628d68416c189cd8f072f92123"} {"level":"info","ts":"2026-07-22T03:05:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fa6a0013-de12-44ac-8f6f-014c3b455561","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:41572","PortSpecifier":{"PortValue":41572}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fa6a0013-de12-44ac-8f6f-014c3b455561","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-995f8f.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T03:05:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fa6a0013-de12-44ac-8f6f-014c3b455561","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:41572","PortSpecifier":{"PortValue":41572}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784689550,"nanos":831758936},"http":{"id":"fa6a0013-de12-44ac-8f6f-014c3b455561","method":"POST","headers":{":authority":"e2e-shared-a-995f8f.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:05:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fa6a0013-de12-44ac-8f6f-014c3b455561","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T03:05:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fa6a0013-de12-44ac-8f6f-014c3b455561","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1b8f5dc6-d648-43b5-a1c0-52422d83042f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6a1776ec-780a-4077-bf07-9fd8a76fea35"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa8b523815bc"]}} {"level":"debug","ts":"2026-07-22T03:05:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fa6a0013-de12-44ac-8f6f-014c3b455561","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa8b523815bc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6a1776ec-780a-4077-bf07-9fd8a76fea35"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1b8f5dc6-d648-43b5-a1c0-52422d83042f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"30dc239e7db8f6679cbce36f1ceb0cd72fb7ecb5337fac0fb59890fcdf9687fd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-995f8f.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:05:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa6a0013-de12-44ac-8f6f-014c3b455561","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:05:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa6a0013-de12-44ac-8f6f-014c3b455561","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:05:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa6a0013-de12-44ac-8f6f-014c3b455561","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-995f8f/rate-test-model-995f8f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-995f8f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:05:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fa6a0013-de12-44ac-8f6f-014c3b455561","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T03:05:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa6a0013-de12-44ac-8f6f-014c3b455561","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T03:05:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa6a0013-de12-44ac-8f6f-014c3b455561","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T03:05:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fa6a0013-de12-44ac-8f6f-014c3b455561","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T03:05:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fa6a0013-de12-44ac-8f6f-014c3b455561","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T03:05:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e1bcc18a-0b55-44e3-b5b8-26ae23f4b8d0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:58388","PortSpecifier":{"PortValue":58388}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e1bcc18a-0b55-44e3-b5b8-26ae23f4b8d0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-bb8c9d.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T03:05:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e1bcc18a-0b55-44e3-b5b8-26ae23f4b8d0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:58388","PortSpecifier":{"PortValue":58388}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784689550,"nanos":874163922},"http":{"id":"e1bcc18a-0b55-44e3-b5b8-26ae23f4b8d0","method":"POST","headers":{":authority":"e2e-shared-b-bb8c9d.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:05:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e1bcc18a-0b55-44e3-b5b8-26ae23f4b8d0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T03:05:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e1bcc18a-0b55-44e3-b5b8-26ae23f4b8d0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1b8f5dc6-d648-43b5-a1c0-52422d83042f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6a1776ec-780a-4077-bf07-9fd8a76fea35"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa8b523815bc"]}} {"level":"debug","ts":"2026-07-22T03:05:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e1bcc18a-0b55-44e3-b5b8-26ae23f4b8d0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa8b523815bc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6a1776ec-780a-4077-bf07-9fd8a76fea35"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1b8f5dc6-d648-43b5-a1c0-52422d83042f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-bb8c9d.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:05:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1bcc18a-0b55-44e3-b5b8-26ae23f4b8d0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:05:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1bcc18a-0b55-44e3-b5b8-26ae23f4b8d0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:05:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1bcc18a-0b55-44e3-b5b8-26ae23f4b8d0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-bb8c9d/rate-test-model-bb8c9d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-bb8c9d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:05:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e1bcc18a-0b55-44e3-b5b8-26ae23f4b8d0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T03:05:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1bcc18a-0b55-44e3-b5b8-26ae23f4b8d0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T03:05:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1bcc18a-0b55-44e3-b5b8-26ae23f4b8d0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T03:05:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e1bcc18a-0b55-44e3-b5b8-26ae23f4b8d0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T03:05:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e1bcc18a-0b55-44e3-b5b8-26ae23f4b8d0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T03:05:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4cadc1e4-dc41-43a6-b683-6e4c70f5c475","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:41586","PortSpecifier":{"PortValue":41586}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4cadc1e4-dc41-43a6-b683-6e4c70f5c475","method":"POST","path":"/ai-tenant-e2e-shared-a-995f8f/rate-test-model-995f8f/v1/completions","host":"e2e-shared-a-995f8f.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T03:05:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4cadc1e4-dc41-43a6-b683-6e4c70f5c475","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:41586","PortSpecifier":{"PortValue":41586}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784689550,"nanos":917588871},"http":{"id":"4cadc1e4-dc41-43a6-b683-6e4c70f5c475","method":"POST","headers":{":authority":"e2e-shared-a-995f8f.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-995f8f/rate-test-model-995f8f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:05:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4cadc1e4-dc41-43a6-b683-6e4c70f5c475","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1PaL0NWoEHoeSESsj_xA64CkZ9JQPO7QG9hLuAFYXJ1mXnY7h4NBMQ6KShCHo"} {"level":"debug","ts":"2026-07-22T03:05:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4cadc1e4-dc41-43a6-b683-6e4c70f5c475","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-995f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1PaL0NWoEHoeSESsj_xA64CkZ9JQPO7QG9hLuAFYXJ1mXnY7h4NBMQ6KShCHo\"}"} {"level":"debug","ts":"2026-07-22T03:05:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4cadc1e4-dc41-43a6-b683-6e4c70f5c475","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-995f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d87cdb94-192d-4d5e-80e2-0c73fa888dc7","keyName":"e2e-rate-a-a9733f","subscription":"e2e-rate-iso-a-a9733f","tenant":"e2e-shared-a-995f8f","userId":"d87cdb94-192d-4d5e-80e2-0c73fa888dc7","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T03:05:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4cadc1e4-dc41-43a6-b683-6e4c70f5c475","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-995f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-995f8f/rate-test-model-995f8f\",\"requestedSubscription\":\"e2e-rate-iso-a-a9733f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-22T03:05:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4cadc1e4-dc41-43a6-b683-6e4c70f5c475","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-995f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-995f8f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a9733f","namespace":"ai-tenant-e2e-shared-a-995f8f","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-995f8f/rate-test-model-995f8f"}} {"level":"debug","ts":"2026-07-22T03:05:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4cadc1e4-dc41-43a6-b683-6e4c70f5c475","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:05:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4cadc1e4-dc41-43a6-b683-6e4c70f5c475","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:05:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4cadc1e4-dc41-43a6-b683-6e4c70f5c475","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:05:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4cadc1e4-dc41-43a6-b683-6e4c70f5c475","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:05:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4cadc1e4-dc41-43a6-b683-6e4c70f5c475","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-995f8f/rate-test-model-995f8f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-995f8f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:05:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4cadc1e4-dc41-43a6-b683-6e4c70f5c475","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T03:05:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4cadc1e4-dc41-43a6-b683-6e4c70f5c475","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a9733f"} {"level":"debug","ts":"2026-07-22T03:05:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4cadc1e4-dc41-43a6-b683-6e4c70f5c475","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T03:05:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4cadc1e4-dc41-43a6-b683-6e4c70f5c475","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d87cdb94-192d-4d5e-80e2-0c73fa888dc7","keyName":"e2e-rate-a-a9733f","selected_subscription":"e2e-rate-iso-a-a9733f","selected_subscription_key":"ai-tenant-e2e-shared-a-995f8f/e2e-rate-iso-a-a9733f@ai-tenant-e2e-shared-a-995f8f/rate-test-model-995f8f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-995f8f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a9733f","namespace":"ai-tenant-e2e-shared-a-995f8f","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-995f8f/rate-test-model-995f8f"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-22T03:05:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4cadc1e4-dc41-43a6-b683-6e4c70f5c475","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T03:05:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4cadc1e4-dc41-43a6-b683-6e4c70f5c475","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T03:05:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ed11658-8f0b-4c74-b3a0-2b05c38aa2c1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:41598","PortSpecifier":{"PortValue":41598}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5ed11658-8f0b-4c74-b3a0-2b05c38aa2c1","method":"POST","path":"/ai-tenant-e2e-shared-a-995f8f/rate-test-model-995f8f/v1/completions","host":"e2e-shared-a-995f8f.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T03:05:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ed11658-8f0b-4c74-b3a0-2b05c38aa2c1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:41598","PortSpecifier":{"PortValue":41598}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784689552,"nanos":11535561},"http":{"id":"5ed11658-8f0b-4c74-b3a0-2b05c38aa2c1","method":"POST","headers":{":authority":"e2e-shared-a-995f8f.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-995f8f/rate-test-model-995f8f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:05:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5ed11658-8f0b-4c74-b3a0-2b05c38aa2c1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1PaL0NWoEHoeSESsj_xA64CkZ9JQPO7QG9hLuAFYXJ1mXnY7h4NBMQ6KShCHo"} {"level":"debug","ts":"2026-07-22T03:05:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5ed11658-8f0b-4c74-b3a0-2b05c38aa2c1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-995f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1PaL0NWoEHoeSESsj_xA64CkZ9JQPO7QG9hLuAFYXJ1mXnY7h4NBMQ6KShCHo\"}"} {"level":"debug","ts":"2026-07-22T03:05:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5ed11658-8f0b-4c74-b3a0-2b05c38aa2c1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-995f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d87cdb94-192d-4d5e-80e2-0c73fa888dc7","keyName":"e2e-rate-a-a9733f","subscription":"e2e-rate-iso-a-a9733f","tenant":"e2e-shared-a-995f8f","userId":"d87cdb94-192d-4d5e-80e2-0c73fa888dc7","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T03:05:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5ed11658-8f0b-4c74-b3a0-2b05c38aa2c1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-995f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-995f8f/rate-test-model-995f8f\",\"requestedSubscription\":\"e2e-rate-iso-a-a9733f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-22T03:05:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5ed11658-8f0b-4c74-b3a0-2b05c38aa2c1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-995f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-995f8f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a9733f","namespace":"ai-tenant-e2e-shared-a-995f8f","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-995f8f/rate-test-model-995f8f"}} {"level":"debug","ts":"2026-07-22T03:05:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5ed11658-8f0b-4c74-b3a0-2b05c38aa2c1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:05:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ed11658-8f0b-4c74-b3a0-2b05c38aa2c1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:05:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ed11658-8f0b-4c74-b3a0-2b05c38aa2c1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:05:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ed11658-8f0b-4c74-b3a0-2b05c38aa2c1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-995f8f/rate-test-model-995f8f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-995f8f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:05:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ed11658-8f0b-4c74-b3a0-2b05c38aa2c1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:05:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ed11658-8f0b-4c74-b3a0-2b05c38aa2c1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T03:05:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ed11658-8f0b-4c74-b3a0-2b05c38aa2c1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a9733f"} {"level":"debug","ts":"2026-07-22T03:05:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ed11658-8f0b-4c74-b3a0-2b05c38aa2c1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T03:05:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ed11658-8f0b-4c74-b3a0-2b05c38aa2c1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d87cdb94-192d-4d5e-80e2-0c73fa888dc7","keyName":"e2e-rate-a-a9733f","selected_subscription":"e2e-rate-iso-a-a9733f","selected_subscription_key":"ai-tenant-e2e-shared-a-995f8f/e2e-rate-iso-a-a9733f@ai-tenant-e2e-shared-a-995f8f/rate-test-model-995f8f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-995f8f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a9733f","namespace":"ai-tenant-e2e-shared-a-995f8f","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-995f8f/rate-test-model-995f8f"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-22T03:05:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ed11658-8f0b-4c74-b3a0-2b05c38aa2c1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T03:05:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ed11658-8f0b-4c74-b3a0-2b05c38aa2c1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T03:05:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"63999131-463a-411e-871e-0da26fb450dc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:41602","PortSpecifier":{"PortValue":41602}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"63999131-463a-411e-871e-0da26fb450dc","method":"POST","path":"/ai-tenant-e2e-shared-a-995f8f/rate-test-model-995f8f/v1/completions","host":"e2e-shared-a-995f8f.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T03:05:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"63999131-463a-411e-871e-0da26fb450dc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:41602","PortSpecifier":{"PortValue":41602}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784689553,"nanos":52150425},"http":{"id":"63999131-463a-411e-871e-0da26fb450dc","method":"POST","headers":{":authority":"e2e-shared-a-995f8f.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-995f8f/rate-test-model-995f8f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:05:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"63999131-463a-411e-871e-0da26fb450dc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1PaL0NWoEHoeSESsj_xA64CkZ9JQPO7QG9hLuAFYXJ1mXnY7h4NBMQ6KShCHo"} {"level":"debug","ts":"2026-07-22T03:05:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"63999131-463a-411e-871e-0da26fb450dc","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-995f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1PaL0NWoEHoeSESsj_xA64CkZ9JQPO7QG9hLuAFYXJ1mXnY7h4NBMQ6KShCHo\"}"} {"level":"debug","ts":"2026-07-22T03:05:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"63999131-463a-411e-871e-0da26fb450dc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-995f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d87cdb94-192d-4d5e-80e2-0c73fa888dc7","keyName":"e2e-rate-a-a9733f","subscription":"e2e-rate-iso-a-a9733f","tenant":"e2e-shared-a-995f8f","userId":"d87cdb94-192d-4d5e-80e2-0c73fa888dc7","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T03:05:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"63999131-463a-411e-871e-0da26fb450dc","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-995f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-995f8f/rate-test-model-995f8f\",\"requestedSubscription\":\"e2e-rate-iso-a-a9733f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-22T03:05:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"63999131-463a-411e-871e-0da26fb450dc","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-995f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-995f8f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a9733f","namespace":"ai-tenant-e2e-shared-a-995f8f","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-995f8f/rate-test-model-995f8f"}} {"level":"debug","ts":"2026-07-22T03:05:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"63999131-463a-411e-871e-0da26fb450dc","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:05:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"63999131-463a-411e-871e-0da26fb450dc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:05:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"63999131-463a-411e-871e-0da26fb450dc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:05:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"63999131-463a-411e-871e-0da26fb450dc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-995f8f/rate-test-model-995f8f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-995f8f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:05:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"63999131-463a-411e-871e-0da26fb450dc","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:05:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"63999131-463a-411e-871e-0da26fb450dc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T03:05:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"63999131-463a-411e-871e-0da26fb450dc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T03:05:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"63999131-463a-411e-871e-0da26fb450dc","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a9733f"} {"level":"debug","ts":"2026-07-22T03:05:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"63999131-463a-411e-871e-0da26fb450dc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d87cdb94-192d-4d5e-80e2-0c73fa888dc7","keyName":"e2e-rate-a-a9733f","selected_subscription":"e2e-rate-iso-a-a9733f","selected_subscription_key":"ai-tenant-e2e-shared-a-995f8f/e2e-rate-iso-a-a9733f@ai-tenant-e2e-shared-a-995f8f/rate-test-model-995f8f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-995f8f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a9733f","namespace":"ai-tenant-e2e-shared-a-995f8f","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-995f8f/rate-test-model-995f8f"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-22T03:05:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"63999131-463a-411e-871e-0da26fb450dc","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T03:05:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"63999131-463a-411e-871e-0da26fb450dc","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T03:06:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5c492998-754d-44dd-bda2-89d0d724d3b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:47760","PortSpecifier":{"PortValue":47760}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5c492998-754d-44dd-bda2-89d0d724d3b0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-995f8f.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T03:06:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5c492998-754d-44dd-bda2-89d0d724d3b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:47760","PortSpecifier":{"PortValue":47760}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784689566,"nanos":83557781},"http":{"id":"5c492998-754d-44dd-bda2-89d0d724d3b0","method":"POST","headers":{":authority":"e2e-shared-a-995f8f.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:06:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5c492998-754d-44dd-bda2-89d0d724d3b0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T03:06:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5c492998-754d-44dd-bda2-89d0d724d3b0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1b8f5dc6-d648-43b5-a1c0-52422d83042f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6a1776ec-780a-4077-bf07-9fd8a76fea35"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa8b523815bc"]}} {"level":"debug","ts":"2026-07-22T03:06:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5c492998-754d-44dd-bda2-89d0d724d3b0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa8b523815bc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6a1776ec-780a-4077-bf07-9fd8a76fea35"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1b8f5dc6-d648-43b5-a1c0-52422d83042f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"30dc239e7db8f6679cbce36f1ceb0cd72fb7ecb5337fac0fb59890fcdf9687fd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-995f8f.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:06:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c492998-754d-44dd-bda2-89d0d724d3b0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:06:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c492998-754d-44dd-bda2-89d0d724d3b0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:06:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c492998-754d-44dd-bda2-89d0d724d3b0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-995f8f/rate-test-model-995f8f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-995f8f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:06:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5c492998-754d-44dd-bda2-89d0d724d3b0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T03:06:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c492998-754d-44dd-bda2-89d0d724d3b0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T03:06:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c492998-754d-44dd-bda2-89d0d724d3b0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-22T03:06:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5c492998-754d-44dd-bda2-89d0d724d3b0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T03:06:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5c492998-754d-44dd-bda2-89d0d724d3b0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T03:06:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d26a349-c839-48c3-aeb6-f151118d4d1f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:38062","PortSpecifier":{"PortValue":38062}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0d26a349-c839-48c3-aeb6-f151118d4d1f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-bb8c9d.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T03:06:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d26a349-c839-48c3-aeb6-f151118d4d1f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:38062","PortSpecifier":{"PortValue":38062}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784689566,"nanos":125370598},"http":{"id":"0d26a349-c839-48c3-aeb6-f151118d4d1f","method":"POST","headers":{":authority":"e2e-shared-b-bb8c9d.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:06:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0d26a349-c839-48c3-aeb6-f151118d4d1f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T03:06:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0d26a349-c839-48c3-aeb6-f151118d4d1f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1b8f5dc6-d648-43b5-a1c0-52422d83042f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6a1776ec-780a-4077-bf07-9fd8a76fea35"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa8b523815bc"]}} {"level":"debug","ts":"2026-07-22T03:06:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0d26a349-c839-48c3-aeb6-f151118d4d1f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa8b523815bc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6a1776ec-780a-4077-bf07-9fd8a76fea35"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1b8f5dc6-d648-43b5-a1c0-52422d83042f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-bb8c9d.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:06:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d26a349-c839-48c3-aeb6-f151118d4d1f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:06:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d26a349-c839-48c3-aeb6-f151118d4d1f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:06:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d26a349-c839-48c3-aeb6-f151118d4d1f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-bb8c9d/rate-test-model-bb8c9d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-bb8c9d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:06:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0d26a349-c839-48c3-aeb6-f151118d4d1f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T03:06:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d26a349-c839-48c3-aeb6-f151118d4d1f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T03:06:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d26a349-c839-48c3-aeb6-f151118d4d1f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T03:06:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d26a349-c839-48c3-aeb6-f151118d4d1f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T03:06:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d26a349-c839-48c3-aeb6-f151118d4d1f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T03:06:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"24edac4c-1505-43d5-9bfa-900a419f89be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:47776","PortSpecifier":{"PortValue":47776}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"24edac4c-1505-43d5-9bfa-900a419f89be","method":"POST","path":"/ai-tenant-e2e-shared-a-995f8f/rate-test-model-995f8f/v1/completions","host":"e2e-shared-a-995f8f.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T03:06:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"24edac4c-1505-43d5-9bfa-900a419f89be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:47776","PortSpecifier":{"PortValue":47776}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784689566,"nanos":164066603},"http":{"id":"24edac4c-1505-43d5-9bfa-900a419f89be","method":"POST","headers":{":authority":"e2e-shared-a-995f8f.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-995f8f/rate-test-model-995f8f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:06:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"24edac4c-1505-43d5-9bfa-900a419f89be","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-147kKbxKaLCRyzHix_ShJlON13BGO0I3dAQHEoBgVREwUt4jsXo4G2ZMZNSPS"} {"level":"debug","ts":"2026-07-22T03:06:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"24edac4c-1505-43d5-9bfa-900a419f89be","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-995f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-147kKbxKaLCRyzHix_ShJlON13BGO0I3dAQHEoBgVREwUt4jsXo4G2ZMZNSPS\"}"} {"level":"debug","ts":"2026-07-22T03:06:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"24edac4c-1505-43d5-9bfa-900a419f89be","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-995f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"635b9f91-cfc4-4b46-8252-2015a51b5d20","keyName":"e2e-rate-a-35c134","subscription":"e2e-rate-iso-a-35c134","tenant":"e2e-shared-a-995f8f","userId":"635b9f91-cfc4-4b46-8252-2015a51b5d20","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T03:06:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"24edac4c-1505-43d5-9bfa-900a419f89be","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-995f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-995f8f/rate-test-model-995f8f\",\"requestedSubscription\":\"e2e-rate-iso-a-35c134\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-22T03:06:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"24edac4c-1505-43d5-9bfa-900a419f89be","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-995f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-995f8f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-35c134","namespace":"ai-tenant-e2e-shared-a-995f8f","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-995f8f/rate-test-model-995f8f"}} {"level":"debug","ts":"2026-07-22T03:06:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"24edac4c-1505-43d5-9bfa-900a419f89be","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:06:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24edac4c-1505-43d5-9bfa-900a419f89be","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:06:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24edac4c-1505-43d5-9bfa-900a419f89be","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:06:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24edac4c-1505-43d5-9bfa-900a419f89be","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:06:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24edac4c-1505-43d5-9bfa-900a419f89be","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-995f8f/rate-test-model-995f8f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-995f8f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:06:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24edac4c-1505-43d5-9bfa-900a419f89be","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T03:06:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24edac4c-1505-43d5-9bfa-900a419f89be","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-35c134"} {"level":"debug","ts":"2026-07-22T03:06:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24edac4c-1505-43d5-9bfa-900a419f89be","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T03:06:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24edac4c-1505-43d5-9bfa-900a419f89be","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"635b9f91-cfc4-4b46-8252-2015a51b5d20","keyName":"e2e-rate-a-35c134","selected_subscription":"e2e-rate-iso-a-35c134","selected_subscription_key":"ai-tenant-e2e-shared-a-995f8f/e2e-rate-iso-a-35c134@ai-tenant-e2e-shared-a-995f8f/rate-test-model-995f8f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-995f8f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-35c134","namespace":"ai-tenant-e2e-shared-a-995f8f","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-995f8f/rate-test-model-995f8f"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-22T03:06:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"24edac4c-1505-43d5-9bfa-900a419f89be","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T03:06:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"24edac4c-1505-43d5-9bfa-900a419f89be","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T03:06:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a66eb922-e70d-4aaf-b9f4-f0bb002d40d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:47782","PortSpecifier":{"PortValue":47782}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a66eb922-e70d-4aaf-b9f4-f0bb002d40d1","method":"POST","path":"/ai-tenant-e2e-shared-a-995f8f/rate-test-model-995f8f/v1/completions","host":"e2e-shared-a-995f8f.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T03:06:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a66eb922-e70d-4aaf-b9f4-f0bb002d40d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:47782","PortSpecifier":{"PortValue":47782}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784689567,"nanos":208562746},"http":{"id":"a66eb922-e70d-4aaf-b9f4-f0bb002d40d1","method":"POST","headers":{":authority":"e2e-shared-a-995f8f.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-995f8f/rate-test-model-995f8f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:06:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a66eb922-e70d-4aaf-b9f4-f0bb002d40d1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-147kKbxKaLCRyzHix_ShJlON13BGO0I3dAQHEoBgVREwUt4jsXo4G2ZMZNSPS"} {"level":"debug","ts":"2026-07-22T03:06:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a66eb922-e70d-4aaf-b9f4-f0bb002d40d1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-995f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-147kKbxKaLCRyzHix_ShJlON13BGO0I3dAQHEoBgVREwUt4jsXo4G2ZMZNSPS\"}"} {"level":"debug","ts":"2026-07-22T03:06:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a66eb922-e70d-4aaf-b9f4-f0bb002d40d1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-995f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"635b9f91-cfc4-4b46-8252-2015a51b5d20","keyName":"e2e-rate-a-35c134","subscription":"e2e-rate-iso-a-35c134","tenant":"e2e-shared-a-995f8f","userId":"635b9f91-cfc4-4b46-8252-2015a51b5d20","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T03:06:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a66eb922-e70d-4aaf-b9f4-f0bb002d40d1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-995f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-995f8f/rate-test-model-995f8f\",\"requestedSubscription\":\"e2e-rate-iso-a-35c134\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-22T03:06:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a66eb922-e70d-4aaf-b9f4-f0bb002d40d1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-995f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-995f8f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-35c134","namespace":"ai-tenant-e2e-shared-a-995f8f","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-995f8f/rate-test-model-995f8f"}} {"level":"debug","ts":"2026-07-22T03:06:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a66eb922-e70d-4aaf-b9f4-f0bb002d40d1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:06:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a66eb922-e70d-4aaf-b9f4-f0bb002d40d1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:06:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a66eb922-e70d-4aaf-b9f4-f0bb002d40d1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:06:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a66eb922-e70d-4aaf-b9f4-f0bb002d40d1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-995f8f/rate-test-model-995f8f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-995f8f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:06:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a66eb922-e70d-4aaf-b9f4-f0bb002d40d1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:06:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a66eb922-e70d-4aaf-b9f4-f0bb002d40d1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T03:06:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a66eb922-e70d-4aaf-b9f4-f0bb002d40d1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-35c134"} {"level":"debug","ts":"2026-07-22T03:06:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a66eb922-e70d-4aaf-b9f4-f0bb002d40d1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T03:06:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a66eb922-e70d-4aaf-b9f4-f0bb002d40d1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"635b9f91-cfc4-4b46-8252-2015a51b5d20","keyName":"e2e-rate-a-35c134","selected_subscription":"e2e-rate-iso-a-35c134","selected_subscription_key":"ai-tenant-e2e-shared-a-995f8f/e2e-rate-iso-a-35c134@ai-tenant-e2e-shared-a-995f8f/rate-test-model-995f8f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-995f8f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-35c134","namespace":"ai-tenant-e2e-shared-a-995f8f","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-995f8f/rate-test-model-995f8f"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-22T03:06:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a66eb922-e70d-4aaf-b9f4-f0bb002d40d1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T03:06:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a66eb922-e70d-4aaf-b9f4-f0bb002d40d1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T03:06:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ecaf7bc1-fb67-43ee-b13a-e5e00317a7d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:47786","PortSpecifier":{"PortValue":47786}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ecaf7bc1-fb67-43ee-b13a-e5e00317a7d2","method":"POST","path":"/ai-tenant-e2e-shared-a-995f8f/rate-test-model-995f8f/v1/completions","host":"e2e-shared-a-995f8f.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T03:06:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ecaf7bc1-fb67-43ee-b13a-e5e00317a7d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:47786","PortSpecifier":{"PortValue":47786}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784689568,"nanos":251280677},"http":{"id":"ecaf7bc1-fb67-43ee-b13a-e5e00317a7d2","method":"POST","headers":{":authority":"e2e-shared-a-995f8f.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-995f8f/rate-test-model-995f8f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:06:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ecaf7bc1-fb67-43ee-b13a-e5e00317a7d2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-147kKbxKaLCRyzHix_ShJlON13BGO0I3dAQHEoBgVREwUt4jsXo4G2ZMZNSPS"} {"level":"debug","ts":"2026-07-22T03:06:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ecaf7bc1-fb67-43ee-b13a-e5e00317a7d2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-995f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-147kKbxKaLCRyzHix_ShJlON13BGO0I3dAQHEoBgVREwUt4jsXo4G2ZMZNSPS\"}"} {"level":"debug","ts":"2026-07-22T03:06:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ecaf7bc1-fb67-43ee-b13a-e5e00317a7d2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-995f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"635b9f91-cfc4-4b46-8252-2015a51b5d20","keyName":"e2e-rate-a-35c134","subscription":"e2e-rate-iso-a-35c134","tenant":"e2e-shared-a-995f8f","userId":"635b9f91-cfc4-4b46-8252-2015a51b5d20","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T03:06:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ecaf7bc1-fb67-43ee-b13a-e5e00317a7d2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-995f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-995f8f/rate-test-model-995f8f\",\"requestedSubscription\":\"e2e-rate-iso-a-35c134\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-22T03:06:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ecaf7bc1-fb67-43ee-b13a-e5e00317a7d2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-995f8f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-995f8f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-35c134","namespace":"ai-tenant-e2e-shared-a-995f8f","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-995f8f/rate-test-model-995f8f"}} {"level":"debug","ts":"2026-07-22T03:06:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ecaf7bc1-fb67-43ee-b13a-e5e00317a7d2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:06:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ecaf7bc1-fb67-43ee-b13a-e5e00317a7d2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:06:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ecaf7bc1-fb67-43ee-b13a-e5e00317a7d2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:06:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ecaf7bc1-fb67-43ee-b13a-e5e00317a7d2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-995f8f/rate-test-model-995f8f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-995f8f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:06:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ecaf7bc1-fb67-43ee-b13a-e5e00317a7d2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:06:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ecaf7bc1-fb67-43ee-b13a-e5e00317a7d2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T03:06:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ecaf7bc1-fb67-43ee-b13a-e5e00317a7d2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-35c134"} {"level":"debug","ts":"2026-07-22T03:06:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ecaf7bc1-fb67-43ee-b13a-e5e00317a7d2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T03:06:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ecaf7bc1-fb67-43ee-b13a-e5e00317a7d2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"635b9f91-cfc4-4b46-8252-2015a51b5d20","keyName":"e2e-rate-a-35c134","selected_subscription":"e2e-rate-iso-a-35c134","selected_subscription_key":"ai-tenant-e2e-shared-a-995f8f/e2e-rate-iso-a-35c134@ai-tenant-e2e-shared-a-995f8f/rate-test-model-995f8f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-995f8f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-35c134","namespace":"ai-tenant-e2e-shared-a-995f8f","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-995f8f/rate-test-model-995f8f"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-22T03:06:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ecaf7bc1-fb67-43ee-b13a-e5e00317a7d2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T03:06:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ecaf7bc1-fb67-43ee-b13a-e5e00317a7d2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T03:06:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b7207f44-e75c-4c3d-b575-a9c4d4a67226","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:38066","PortSpecifier":{"PortValue":38066}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b7207f44-e75c-4c3d-b575-a9c4d4a67226","method":"POST","path":"/ai-tenant-e2e-shared-b-bb8c9d/rate-test-model-bb8c9d/v1/completions","host":"e2e-shared-b-bb8c9d.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T03:06:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b7207f44-e75c-4c3d-b575-a9c4d4a67226","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:38066","PortSpecifier":{"PortValue":38066}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784689568,"nanos":291345314},"http":{"id":"b7207f44-e75c-4c3d-b575-a9c4d4a67226","method":"POST","headers":{":authority":"e2e-shared-b-bb8c9d.apps.ebcdc8e6-44fc-42d9-a270-aa8b523815bc.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-bb8c9d/rate-test-model-bb8c9d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:06:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b7207f44-e75c-4c3d-b575-a9c4d4a67226","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-o15PVnD4NNQj48jd_qCtBeNhZzxS4NnY8tEgHFdSjSipND275FkYPVYScLqY"} {"level":"debug","ts":"2026-07-22T03:06:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b7207f44-e75c-4c3d-b575-a9c4d4a67226","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-bb8c9d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-o15PVnD4NNQj48jd_qCtBeNhZzxS4NnY8tEgHFdSjSipND275FkYPVYScLqY\"}"} {"level":"debug","ts":"2026-07-22T03:06:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b7207f44-e75c-4c3d-b575-a9c4d4a67226","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-bb8c9d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0b47e132-7615-4f51-8753-ee9beabf591d","keyName":"e2e-rate-b-35c134","subscription":"e2e-rate-iso-b-35c134","tenant":"e2e-shared-b-bb8c9d","userId":"0b47e132-7615-4f51-8753-ee9beabf591d","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T03:06:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b7207f44-e75c-4c3d-b575-a9c4d4a67226","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-bb8c9d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-bb8c9d/rate-test-model-bb8c9d\",\"requestedSubscription\":\"e2e-rate-iso-b-35c134\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-22T03:06:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b7207f44-e75c-4c3d-b575-a9c4d4a67226","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-bb8c9d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-bb8c9d","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-35c134","namespace":"ai-tenant-e2e-shared-b-bb8c9d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-bb8c9d/rate-test-model-bb8c9d"}} {"level":"debug","ts":"2026-07-22T03:06:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b7207f44-e75c-4c3d-b575-a9c4d4a67226","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T03:06:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7207f44-e75c-4c3d-b575-a9c4d4a67226","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:06:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7207f44-e75c-4c3d-b575-a9c4d4a67226","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:06:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7207f44-e75c-4c3d-b575-a9c4d4a67226","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-bb8c9d/rate-test-model-bb8c9d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-bb8c9d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:06:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7207f44-e75c-4c3d-b575-a9c4d4a67226","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T03:06:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b7207f44-e75c-4c3d-b575-a9c4d4a67226","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T03:06:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b7207f44-e75c-4c3d-b575-a9c4d4a67226","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T03:06:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b7207f44-e75c-4c3d-b575-a9c4d4a67226","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-35c134"} {"level":"debug","ts":"2026-07-22T03:06:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b7207f44-e75c-4c3d-b575-a9c4d4a67226","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"0b47e132-7615-4f51-8753-ee9beabf591d","keyName":"e2e-rate-b-35c134","selected_subscription":"e2e-rate-iso-b-35c134","selected_subscription_key":"ai-tenant-e2e-shared-b-bb8c9d/e2e-rate-iso-b-35c134@ai-tenant-e2e-shared-b-bb8c9d/rate-test-model-bb8c9d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-bb8c9d","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-35c134","namespace":"ai-tenant-e2e-shared-b-bb8c9d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-bb8c9d/rate-test-model-bb8c9d"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-22T03:06:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b7207f44-e75c-4c3d-b575-a9c4d4a67226","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T03:06:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b7207f44-e75c-4c3d-b575-a9c4d4a67226","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T03:06:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e039e86f20fab5827661d08e82305dcb490760be9fd2912ebd7e3477853d8907"} {"level":"info","ts":"2026-07-22T03:06:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b4f1e84cdb84109919c4539fe9e5bd51f4be494c737848aade58feba22d20782"} {"level":"info","ts":"2026-07-22T03:06:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/91753b6da497c9d5438ae65389df2b77a157dc9693d70791d332b6f78c421376"} {"level":"info","ts":"2026-07-22T03:06:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7f4f978adc0d4532ec8f9b722a2b6aab306d5ff0f17dbdc24cc9130e1e2d5336"} {"level":"info","ts":"2026-07-22T03:06:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c40838a2a57a518af0ab9f76f3dfeff3ddd11b3e58744e94f65d4a971142ab95"} {"level":"info","ts":"2026-07-22T03:06:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2acf2020d8e6faae8d7d0678fa53985b9284ce5f53edeb27bcce5ceefb936fac"} {"level":"info","ts":"2026-07-22T03:06:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/af44dfe3283f41ea0bcdff4de73898683f754ab62f34a1f235562f4b306c7913"} {"level":"info","ts":"2026-07-22T03:06:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f5d2dd4266381109da272d931053838c5dbd3edd9253d404bd96e24ca174eace"} {"level":"info","ts":"2026-07-22T03:06:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fd83aaf7a49d5e1bbd39a84f84fcbb42b229956cf459b900e87b5b51ac1253bd"} {"level":"info","ts":"2026-07-22T03:06:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/30dc239e7db8f6679cbce36f1ceb0cd72fb7ecb5337fac0fb59890fcdf9687fd"} {"level":"info","ts":"2026-07-22T03:06:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/834211e6b83ad4d182fbafb8e2d10a37942cc5a25b6333ad5b426c6764e18936"} {"level":"info","ts":"2026-07-22T03:06:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7c6afb4bc24d9150b829ad2d4dacb34635c90495fa60a4c87f03fabd165e5107"} {"level":"info","ts":"2026-07-22T03:06:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f98447b21f0b8640db8b49755ea6ed16a536100c5bdfdc0edd9aef2c93414412"} {"level":"info","ts":"2026-07-22T03:06:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/74edd99d9c699b77c60c1e29f1b458f1646cdb628d68416c189cd8f072f92123"} {"level":"info","ts":"2026-07-22T03:06:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/feea94b3265a8b6737154164635852eeaa535e20f8fbacb1460a2b36c6230096"} {"level":"info","ts":"2026-07-22T03:06:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/70c832ac479b08adbaba131a0da3b55cf761fdd5979565c59822a197e953ad3d"} {"level":"info","ts":"2026-07-22T03:06:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6a0b511727e3d23635693f734f9dff87ec9be55864a50c17745cf904ab18b77a"} {"level":"info","ts":"2026-07-22T03:06:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e45a5a77b438d6bc22db4cce98bb5898db4e5646f636a61c30e9fd7cbfe4bded"} {"level":"info","ts":"2026-07-22T03:06:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b0d1d1805ea5a922a7a9028903072f74982c224ce3d799eadaeda7771dd6d8ea"} {"level":"info","ts":"2026-07-22T03:06:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/069ca05440229769b3a48eb0cf59568839d6ea1bc60022961581829088ada136"} {"level":"info","ts":"2026-07-22T03:06:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5d7299f602df90f3bc5ef9e12ac0fb2c42a886532fa31bd5e084601705895ce7"} {"level":"info","ts":"2026-07-22T03:06:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a9121d008e4382a17015a2c8e49405e32e18a3f8cedd0a5406d1fb433880543f"} {"level":"info","ts":"2026-07-22T03:06:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ff1115e71242465c7d507f207ad65f74a6c641fd4764d33936436981db08794"} {"level":"info","ts":"2026-07-22T03:06:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/705ee6a08c838d5eb231e807da03335aefc9a3911c24cdca159125fb09930d52"}