--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"debug","ts":"2026-07-27T21:34:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0a38bdaf-7602-414a-9bcb-ff0d7c481ee7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T21:34:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"10632851-af7a-4f86-9f40-05c9b0c9b05f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:54986","PortSpecifier":{"PortValue":54986}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"10632851-af7a-4f86-9f40-05c9b0c9b05f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-85f004.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T21:34:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"10632851-af7a-4f86-9f40-05c9b0c9b05f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:54986","PortSpecifier":{"PortValue":54986}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785188056,"nanos":193558205},"http":{"id":"10632851-af7a-4f86-9f40-05c9b0c9b05f","method":"POST","headers":{":authority":"e2e-shared-b-85f004.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T21:34:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"10632851-af7a-4f86-9f40-05c9b0c9b05f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T21:34:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"10632851-af7a-4f86-9f40-05c9b0c9b05f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"cbd7f247-ea90-43d8-8ce3-e28a2a121794","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6ac1e77f-7df8-4dea-ab0c-bf8d022a6519"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa88232987eb"]}} {"level":"debug","ts":"2026-07-27T21:34:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"10632851-af7a-4f86-9f40-05c9b0c9b05f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa88232987eb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6ac1e77f-7df8-4dea-ab0c-bf8d022a6519"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"cbd7f247-ea90-43d8-8ce3-e28a2a121794","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-85f004.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T21:34:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"10632851-af7a-4f86-9f40-05c9b0c9b05f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:34:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"10632851-af7a-4f86-9f40-05c9b0c9b05f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:34:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"10632851-af7a-4f86-9f40-05c9b0c9b05f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-85f004/auth-test-model-85f004\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-85f004/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:34:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"10632851-af7a-4f86-9f40-05c9b0c9b05f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T21:34:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"10632851-af7a-4f86-9f40-05c9b0c9b05f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T21:34:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"10632851-af7a-4f86-9f40-05c9b0c9b05f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-27T21:34:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"10632851-af7a-4f86-9f40-05c9b0c9b05f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T21:34:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"10632851-af7a-4f86-9f40-05c9b0c9b05f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T21:34:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b51292f-c4a1-4c50-be42-2e03dcfe5153","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:60024","PortSpecifier":{"PortValue":60024}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2b51292f-c4a1-4c50-be42-2e03dcfe5153","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-c910ce.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T21:34:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b51292f-c4a1-4c50-be42-2e03dcfe5153","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:60024","PortSpecifier":{"PortValue":60024}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785188056,"nanos":237503194},"http":{"id":"2b51292f-c4a1-4c50-be42-2e03dcfe5153","method":"POST","headers":{":authority":"e2e-shared-a-c910ce.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T21:34:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2b51292f-c4a1-4c50-be42-2e03dcfe5153","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T21:34:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2b51292f-c4a1-4c50-be42-2e03dcfe5153","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"cbd7f247-ea90-43d8-8ce3-e28a2a121794","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6ac1e77f-7df8-4dea-ab0c-bf8d022a6519"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa88232987eb"]}} {"level":"debug","ts":"2026-07-27T21:34:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2b51292f-c4a1-4c50-be42-2e03dcfe5153","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa88232987eb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6ac1e77f-7df8-4dea-ab0c-bf8d022a6519"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"cbd7f247-ea90-43d8-8ce3-e28a2a121794","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f1ab5942392897eb6acfcbe34d1617f2f14e4794eed0129100da850801e0c30b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c910ce.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T21:34:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b51292f-c4a1-4c50-be42-2e03dcfe5153","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:34:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b51292f-c4a1-4c50-be42-2e03dcfe5153","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:34:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b51292f-c4a1-4c50-be42-2e03dcfe5153","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c910ce/auth-test-model-c910ce\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c910ce/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:34:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2b51292f-c4a1-4c50-be42-2e03dcfe5153","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T21:34:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b51292f-c4a1-4c50-be42-2e03dcfe5153","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T21:34:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b51292f-c4a1-4c50-be42-2e03dcfe5153","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-27T21:34:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b51292f-c4a1-4c50-be42-2e03dcfe5153","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T21:34:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b51292f-c4a1-4c50-be42-2e03dcfe5153","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T21:34:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d43c7ac3-c9e9-47aa-8f2d-9d63ade041aa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:54998","PortSpecifier":{"PortValue":54998}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d43c7ac3-c9e9-47aa-8f2d-9d63ade041aa","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-85f004.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T21:34:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d43c7ac3-c9e9-47aa-8f2d-9d63ade041aa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:54998","PortSpecifier":{"PortValue":54998}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785188056,"nanos":276196491},"http":{"id":"d43c7ac3-c9e9-47aa-8f2d-9d63ade041aa","method":"POST","headers":{":authority":"e2e-shared-b-85f004.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T21:34:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d43c7ac3-c9e9-47aa-8f2d-9d63ade041aa","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T21:34:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d43c7ac3-c9e9-47aa-8f2d-9d63ade041aa","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"cbd7f247-ea90-43d8-8ce3-e28a2a121794","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6ac1e77f-7df8-4dea-ab0c-bf8d022a6519"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa88232987eb"]}} {"level":"debug","ts":"2026-07-27T21:34:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d43c7ac3-c9e9-47aa-8f2d-9d63ade041aa","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa88232987eb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6ac1e77f-7df8-4dea-ab0c-bf8d022a6519"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"cbd7f247-ea90-43d8-8ce3-e28a2a121794","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-85f004.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T21:34:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d43c7ac3-c9e9-47aa-8f2d-9d63ade041aa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:34:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d43c7ac3-c9e9-47aa-8f2d-9d63ade041aa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:34:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d43c7ac3-c9e9-47aa-8f2d-9d63ade041aa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-85f004/auth-test-model-85f004\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-85f004/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:34:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d43c7ac3-c9e9-47aa-8f2d-9d63ade041aa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T21:34:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d43c7ac3-c9e9-47aa-8f2d-9d63ade041aa","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T21:34:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d43c7ac3-c9e9-47aa-8f2d-9d63ade041aa","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-27T21:34:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d43c7ac3-c9e9-47aa-8f2d-9d63ade041aa","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T21:34:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d43c7ac3-c9e9-47aa-8f2d-9d63ade041aa","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T21:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd"} {"level":"info","ts":"2026-07-27T21:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f548d9b24df83b6985c39199a7d8df706c12bb11571ec33d059aeab4da48822c"} {"level":"info","ts":"2026-07-27T21:34:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/88ee61593250697a22448453bc3af1f07edb33c8f0e80cc1a16c9218ecc147da"} {"level":"info","ts":"2026-07-27T21:34:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c4b5ee3f43ec0762dd0dd2723dcce73dea05a5e839e22c680d833b9531a33e9d"} {"level":"info","ts":"2026-07-27T21:34:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d09115d685936d1c458abed31a9384aa53e491dc0334dd6edba00e636bf320a7"} {"level":"info","ts":"2026-07-27T21:34:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/11adff635589eff16a9f57b712aba20f3b0343415ee7c04c5a391d4b030ad9c2"} {"level":"info","ts":"2026-07-27T21:34:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac"} {"level":"info","ts":"2026-07-27T21:34:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/23111474c23b0d02eda6e2f9a3792d042628a7f1cf425187f2d5b6540fb1cab9"} {"level":"info","ts":"2026-07-27T21:34:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4"} {"level":"info","ts":"2026-07-27T21:34:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d"} {"level":"info","ts":"2026-07-27T21:34:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6333c91bf0096bc0b94328ebb897c2674ef1473b4a6a5974c6fb13a55d93282a"} {"level":"info","ts":"2026-07-27T21:34:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d9548dba585c92fb7d1ab82e7d4c0a1ad4958b4b1dcaaa67345dc5dbbe1a8a21"} {"level":"debug","ts":"2026-07-27T21:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:34:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:34:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:34:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:34:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac"} {"level":"info","ts":"2026-07-27T21:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:34:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:34:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac"} {"level":"error","ts":"2026-07-27T21:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-27T21:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac"} {"level":"debug","ts":"2026-07-27T21:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:34:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:34:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:34:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:34:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac"} {"level":"debug","ts":"2026-07-27T21:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac"} {"level":"debug","ts":"2026-07-27T21:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:34:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:34:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:34:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:34:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac"} {"level":"debug","ts":"2026-07-27T21:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac"} {"level":"debug","ts":"2026-07-27T21:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:34:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:34:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:34:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:34:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac"} {"level":"debug","ts":"2026-07-27T21:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:34:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:34:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac"} {"level":"info","ts":"2026-07-27T21:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:34:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:34:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4"} {"level":"info","ts":"2026-07-27T21:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:34:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:34:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4"} {"level":"debug","ts":"2026-07-27T21:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:34:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:34:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:34:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:34:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac"} {"level":"error","ts":"2026-07-27T21:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-27T21:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:34:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:34:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:34:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:34:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4"} {"level":"error","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4"} {"level":"debug","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:34:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:34:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:34:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:34:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4"} {"level":"debug","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4"} {"level":"debug","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:34:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:34:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:34:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:34:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4"} {"level":"debug","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88ee61593250697a22448453bc3af1f07edb33c8f0e80cc1a16c9218ecc147da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:34:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:34:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88ee61593250697a22448453bc3af1f07edb33c8f0e80cc1a16c9218ecc147da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88ee61593250697a22448453bc3af1f07edb33c8f0e80cc1a16c9218ecc147da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4"} {"level":"debug","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88ee61593250697a22448453bc3af1f07edb33c8f0e80cc1a16c9218ecc147da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:34:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:34:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88ee61593250697a22448453bc3af1f07edb33c8f0e80cc1a16c9218ecc147da"} {"level":"info","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88ee61593250697a22448453bc3af1f07edb33c8f0e80cc1a16c9218ecc147da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88ee61593250697a22448453bc3af1f07edb33c8f0e80cc1a16c9218ecc147da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:34:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:34:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88ee61593250697a22448453bc3af1f07edb33c8f0e80cc1a16c9218ecc147da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88ee61593250697a22448453bc3af1f07edb33c8f0e80cc1a16c9218ecc147da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:34:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:34:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88ee61593250697a22448453bc3af1f07edb33c8f0e80cc1a16c9218ecc147da"} {"level":"info","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88ee61593250697a22448453bc3af1f07edb33c8f0e80cc1a16c9218ecc147da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:34:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:34:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88ee61593250697a22448453bc3af1f07edb33c8f0e80cc1a16c9218ecc147da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88ee61593250697a22448453bc3af1f07edb33c8f0e80cc1a16c9218ecc147da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88ee61593250697a22448453bc3af1f07edb33c8f0e80cc1a16c9218ecc147da","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88ee61593250697a22448453bc3af1f07edb33c8f0e80cc1a16c9218ecc147da"} {"level":"debug","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88ee61593250697a22448453bc3af1f07edb33c8f0e80cc1a16c9218ecc147da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:34:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:34:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88ee61593250697a22448453bc3af1f07edb33c8f0e80cc1a16c9218ecc147da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88ee61593250697a22448453bc3af1f07edb33c8f0e80cc1a16c9218ecc147da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88ee61593250697a22448453bc3af1f07edb33c8f0e80cc1a16c9218ecc147da","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4"} {"level":"info","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88ee61593250697a22448453bc3af1f07edb33c8f0e80cc1a16c9218ecc147da"} {"level":"debug","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9548dba585c92fb7d1ab82e7d4c0a1ad4958b4b1dcaaa67345dc5dbbe1a8a21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:34:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:34:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9548dba585c92fb7d1ab82e7d4c0a1ad4958b4b1dcaaa67345dc5dbbe1a8a21","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9548dba585c92fb7d1ab82e7d4c0a1ad4958b4b1dcaaa67345dc5dbbe1a8a21","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9548dba585c92fb7d1ab82e7d4c0a1ad4958b4b1dcaaa67345dc5dbbe1a8a21"} {"level":"debug","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9548dba585c92fb7d1ab82e7d4c0a1ad4958b4b1dcaaa67345dc5dbbe1a8a21","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9548dba585c92fb7d1ab82e7d4c0a1ad4958b4b1dcaaa67345dc5dbbe1a8a21","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9548dba585c92fb7d1ab82e7d4c0a1ad4958b4b1dcaaa67345dc5dbbe1a8a21"} {"level":"debug","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9548dba585c92fb7d1ab82e7d4c0a1ad4958b4b1dcaaa67345dc5dbbe1a8a21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:34:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:34:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9548dba585c92fb7d1ab82e7d4c0a1ad4958b4b1dcaaa67345dc5dbbe1a8a21"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9548dba585c92fb7d1ab82e7d4c0a1ad4958b4b1dcaaa67345dc5dbbe1a8a21","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9548dba585c92fb7d1ab82e7d4c0a1ad4958b4b1dcaaa67345dc5dbbe1a8a21","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4b5ee3f43ec0762dd0dd2723dcce73dea05a5e839e22c680d833b9531a33e9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:34:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:34:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4b5ee3f43ec0762dd0dd2723dcce73dea05a5e839e22c680d833b9531a33e9d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9548dba585c92fb7d1ab82e7d4c0a1ad4958b4b1dcaaa67345dc5dbbe1a8a21"} {"level":"debug","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4b5ee3f43ec0762dd0dd2723dcce73dea05a5e839e22c680d833b9531a33e9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:34:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:34:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4b5ee3f43ec0762dd0dd2723dcce73dea05a5e839e22c680d833b9531a33e9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4b5ee3f43ec0762dd0dd2723dcce73dea05a5e839e22c680d833b9531a33e9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:34:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:34:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4b5ee3f43ec0762dd0dd2723dcce73dea05a5e839e22c680d833b9531a33e9d"} {"level":"error","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c4b5ee3f43ec0762dd0dd2723dcce73dea05a5e839e22c680d833b9531a33e9d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c4b5ee3f43ec0762dd0dd2723dcce73dea05a5e839e22c680d833b9531a33e9d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4b5ee3f43ec0762dd0dd2723dcce73dea05a5e839e22c680d833b9531a33e9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4b5ee3f43ec0762dd0dd2723dcce73dea05a5e839e22c680d833b9531a33e9d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4b5ee3f43ec0762dd0dd2723dcce73dea05a5e839e22c680d833b9531a33e9d"} {"level":"debug","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23111474c23b0d02eda6e2f9a3792d042628a7f1cf425187f2d5b6540fb1cab9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:34:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:34:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23111474c23b0d02eda6e2f9a3792d042628a7f1cf425187f2d5b6540fb1cab9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f548d9b24df83b6985c39199a7d8df706c12bb11571ec33d059aeab4da48822c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:34:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:34:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23111474c23b0d02eda6e2f9a3792d042628a7f1cf425187f2d5b6540fb1cab9"} {"level":"info","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f548d9b24df83b6985c39199a7d8df706c12bb11571ec33d059aeab4da48822c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23111474c23b0d02eda6e2f9a3792d042628a7f1cf425187f2d5b6540fb1cab9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:34:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:34:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23111474c23b0d02eda6e2f9a3792d042628a7f1cf425187f2d5b6540fb1cab9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f548d9b24df83b6985c39199a7d8df706c12bb11571ec33d059aeab4da48822c"} {"level":"info","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23111474c23b0d02eda6e2f9a3792d042628a7f1cf425187f2d5b6540fb1cab9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4b5ee3f43ec0762dd0dd2723dcce73dea05a5e839e22c680d833b9531a33e9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:34:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:34:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4b5ee3f43ec0762dd0dd2723dcce73dea05a5e839e22c680d833b9531a33e9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23111474c23b0d02eda6e2f9a3792d042628a7f1cf425187f2d5b6540fb1cab9"} {"level":"info","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4b5ee3f43ec0762dd0dd2723dcce73dea05a5e839e22c680d833b9531a33e9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f548d9b24df83b6985c39199a7d8df706c12bb11571ec33d059aeab4da48822c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:34:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:34:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f548d9b24df83b6985c39199a7d8df706c12bb11571ec33d059aeab4da48822c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23111474c23b0d02eda6e2f9a3792d042628a7f1cf425187f2d5b6540fb1cab9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4b5ee3f43ec0762dd0dd2723dcce73dea05a5e839e22c680d833b9531a33e9d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f548d9b24df83b6985c39199a7d8df706c12bb11571ec33d059aeab4da48822c"} {"level":"debug","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f548d9b24df83b6985c39199a7d8df706c12bb11571ec33d059aeab4da48822c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:34:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:34:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f548d9b24df83b6985c39199a7d8df706c12bb11571ec33d059aeab4da48822c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f548d9b24df83b6985c39199a7d8df706c12bb11571ec33d059aeab4da48822c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11adff635589eff16a9f57b712aba20f3b0343415ee7c04c5a391d4b030ad9c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:34:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:34:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23111474c23b0d02eda6e2f9a3792d042628a7f1cf425187f2d5b6540fb1cab9"} {"level":"info","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11adff635589eff16a9f57b712aba20f3b0343415ee7c04c5a391d4b030ad9c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f548d9b24df83b6985c39199a7d8df706c12bb11571ec33d059aeab4da48822c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11adff635589eff16a9f57b712aba20f3b0343415ee7c04c5a391d4b030ad9c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11adff635589eff16a9f57b712aba20f3b0343415ee7c04c5a391d4b030ad9c2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4b5ee3f43ec0762dd0dd2723dcce73dea05a5e839e22c680d833b9531a33e9d"} {"level":"debug","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11adff635589eff16a9f57b712aba20f3b0343415ee7c04c5a391d4b030ad9c2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f548d9b24df83b6985c39199a7d8df706c12bb11571ec33d059aeab4da48822c"} {"level":"info","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11adff635589eff16a9f57b712aba20f3b0343415ee7c04c5a391d4b030ad9c2"} {"level":"debug","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11adff635589eff16a9f57b712aba20f3b0343415ee7c04c5a391d4b030ad9c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:34:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:34:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11adff635589eff16a9f57b712aba20f3b0343415ee7c04c5a391d4b030ad9c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11adff635589eff16a9f57b712aba20f3b0343415ee7c04c5a391d4b030ad9c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:34:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:34:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11adff635589eff16a9f57b712aba20f3b0343415ee7c04c5a391d4b030ad9c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:34:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:34:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d"} {"level":"info","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:34:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:34:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11adff635589eff16a9f57b712aba20f3b0343415ee7c04c5a391d4b030ad9c2"} {"level":"info","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:34:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:34:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd"} {"level":"info","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:34:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:34:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:34:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:34:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d"} {"level":"info","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:34:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:34:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:34:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:34:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd"} {"level":"info","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:34:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:34:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d"} {"level":"info","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:34:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:34:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd"} {"level":"info","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:34:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:34:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:34:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:34:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d"} {"level":"info","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:34:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:34:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:34:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd"} {"level":"info","ts":"2026-07-27T21:34:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:34:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:34:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:34:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6333c91bf0096bc0b94328ebb897c2674ef1473b4a6a5974c6fb13a55d93282a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:34:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:34:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:34:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d"} {"level":"info","ts":"2026-07-27T21:34:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6333c91bf0096bc0b94328ebb897c2674ef1473b4a6a5974c6fb13a55d93282a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:34:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:34:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:34:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd"} {"level":"info","ts":"2026-07-27T21:34:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6333c91bf0096bc0b94328ebb897c2674ef1473b4a6a5974c6fb13a55d93282a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:34:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:34:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:34:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6333c91bf0096bc0b94328ebb897c2674ef1473b4a6a5974c6fb13a55d93282a"} {"level":"info","ts":"2026-07-27T21:34:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6333c91bf0096bc0b94328ebb897c2674ef1473b4a6a5974c6fb13a55d93282a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:34:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:34:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:34:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d"} {"level":"info","ts":"2026-07-27T21:34:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6333c91bf0096bc0b94328ebb897c2674ef1473b4a6a5974c6fb13a55d93282a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:34:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:34:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:34:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:34:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:34:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:34:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6333c91bf0096bc0b94328ebb897c2674ef1473b4a6a5974c6fb13a55d93282a"} {"level":"error","ts":"2026-07-27T21:34:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-27T21:34:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d09115d685936d1c458abed31a9384aa53e491dc0334dd6edba00e636bf320a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:34:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:34:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:34:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d"} {"level":"info","ts":"2026-07-27T21:34:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d09115d685936d1c458abed31a9384aa53e491dc0334dd6edba00e636bf320a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6333c91bf0096bc0b94328ebb897c2674ef1473b4a6a5974c6fb13a55d93282a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:34:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:34:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6333c91bf0096bc0b94328ebb897c2674ef1473b4a6a5974c6fb13a55d93282a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:34:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d09115d685936d1c458abed31a9384aa53e491dc0334dd6edba00e636bf320a7"} {"level":"info","ts":"2026-07-27T21:34:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d"} {"level":"info","ts":"2026-07-27T21:34:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d09115d685936d1c458abed31a9384aa53e491dc0334dd6edba00e636bf320a7"} {"level":"info","ts":"2026-07-27T21:34:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6333c91bf0096bc0b94328ebb897c2674ef1473b4a6a5974c6fb13a55d93282a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d09115d685936d1c458abed31a9384aa53e491dc0334dd6edba00e636bf320a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:34:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:34:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d09115d685936d1c458abed31a9384aa53e491dc0334dd6edba00e636bf320a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:34:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6333c91bf0096bc0b94328ebb897c2674ef1473b4a6a5974c6fb13a55d93282a"} {"level":"info","ts":"2026-07-27T21:34:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d09115d685936d1c458abed31a9384aa53e491dc0334dd6edba00e636bf320a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6333c91bf0096bc0b94328ebb897c2674ef1473b4a6a5974c6fb13a55d93282a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d09115d685936d1c458abed31a9384aa53e491dc0334dd6edba00e636bf320a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:34:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:34:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:34:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d09115d685936d1c458abed31a9384aa53e491dc0334dd6edba00e636bf320a7"} {"level":"info","ts":"2026-07-27T21:34:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d09115d685936d1c458abed31a9384aa53e491dc0334dd6edba00e636bf320a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d09115d685936d1c458abed31a9384aa53e491dc0334dd6edba00e636bf320a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d09115d685936d1c458abed31a9384aa53e491dc0334dd6edba00e636bf320a7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:34:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d09115d685936d1c458abed31a9384aa53e491dc0334dd6edba00e636bf320a7"} {"level":"debug","ts":"2026-07-27T21:34:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d09115d685936d1c458abed31a9384aa53e491dc0334dd6edba00e636bf320a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:34:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:34:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d09115d685936d1c458abed31a9384aa53e491dc0334dd6edba00e636bf320a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:34:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d09115d685936d1c458abed31a9384aa53e491dc0334dd6edba00e636bf320a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d09115d685936d1c458abed31a9384aa53e491dc0334dd6edba00e636bf320a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:34:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:34:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:34:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d09115d685936d1c458abed31a9384aa53e491dc0334dd6edba00e636bf320a7"} {"level":"info","ts":"2026-07-27T21:34:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d09115d685936d1c458abed31a9384aa53e491dc0334dd6edba00e636bf320a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d09115d685936d1c458abed31a9384aa53e491dc0334dd6edba00e636bf320a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:34:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:34:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d09115d685936d1c458abed31a9384aa53e491dc0334dd6edba00e636bf320a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:34:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d09115d685936d1c458abed31a9384aa53e491dc0334dd6edba00e636bf320a7"} {"level":"info","ts":"2026-07-27T21:34:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d09115d685936d1c458abed31a9384aa53e491dc0334dd6edba00e636bf320a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d09115d685936d1c458abed31a9384aa53e491dc0334dd6edba00e636bf320a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:34:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:34:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d09115d685936d1c458abed31a9384aa53e491dc0334dd6edba00e636bf320a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:34:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d09115d685936d1c458abed31a9384aa53e491dc0334dd6edba00e636bf320a7"} {"level":"error","ts":"2026-07-27T21:34:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d09115d685936d1c458abed31a9384aa53e491dc0334dd6edba00e636bf320a7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d09115d685936d1c458abed31a9384aa53e491dc0334dd6edba00e636bf320a7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-27T21:34:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d09115d685936d1c458abed31a9384aa53e491dc0334dd6edba00e636bf320a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:34:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d09115d685936d1c458abed31a9384aa53e491dc0334dd6edba00e636bf320a7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:34:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"809a9fcc-db96-4ab3-a6b6-3ba9f803701f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:39490","PortSpecifier":{"PortValue":39490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"809a9fcc-db96-4ab3-a6b6-3ba9f803701f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c910ce.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T21:34:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"809a9fcc-db96-4ab3-a6b6-3ba9f803701f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:39490","PortSpecifier":{"PortValue":39490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785188099,"nanos":141991833},"http":{"id":"809a9fcc-db96-4ab3-a6b6-3ba9f803701f","method":"POST","headers":{":authority":"e2e-shared-a-c910ce.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T21:34:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"809a9fcc-db96-4ab3-a6b6-3ba9f803701f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T21:34:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"809a9fcc-db96-4ab3-a6b6-3ba9f803701f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"cbd7f247-ea90-43d8-8ce3-e28a2a121794","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6ac1e77f-7df8-4dea-ab0c-bf8d022a6519"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa88232987eb"]}} {"level":"debug","ts":"2026-07-27T21:34:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"809a9fcc-db96-4ab3-a6b6-3ba9f803701f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa88232987eb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6ac1e77f-7df8-4dea-ab0c-bf8d022a6519"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"cbd7f247-ea90-43d8-8ce3-e28a2a121794","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f1ab5942392897eb6acfcbe34d1617f2f14e4794eed0129100da850801e0c30b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c910ce.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T21:34:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"809a9fcc-db96-4ab3-a6b6-3ba9f803701f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:34:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"809a9fcc-db96-4ab3-a6b6-3ba9f803701f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:34:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"809a9fcc-db96-4ab3-a6b6-3ba9f803701f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c910ce/auth-test-model-c910ce\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c910ce/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:34:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"809a9fcc-db96-4ab3-a6b6-3ba9f803701f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T21:34:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"809a9fcc-db96-4ab3-a6b6-3ba9f803701f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-27T21:34:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"809a9fcc-db96-4ab3-a6b6-3ba9f803701f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-27T21:34:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"809a9fcc-db96-4ab3-a6b6-3ba9f803701f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T21:34:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"809a9fcc-db96-4ab3-a6b6-3ba9f803701f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T21:34:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1d0dc940-4d17-4b4a-a874-6dc8e3d6415d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:32872","PortSpecifier":{"PortValue":32872}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1d0dc940-4d17-4b4a-a874-6dc8e3d6415d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-85f004.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T21:34:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1d0dc940-4d17-4b4a-a874-6dc8e3d6415d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:32872","PortSpecifier":{"PortValue":32872}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785188099,"nanos":180024057},"http":{"id":"1d0dc940-4d17-4b4a-a874-6dc8e3d6415d","method":"POST","headers":{":authority":"e2e-shared-b-85f004.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T21:34:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1d0dc940-4d17-4b4a-a874-6dc8e3d6415d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T21:34:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1d0dc940-4d17-4b4a-a874-6dc8e3d6415d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"cbd7f247-ea90-43d8-8ce3-e28a2a121794","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6ac1e77f-7df8-4dea-ab0c-bf8d022a6519"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa88232987eb"]}} {"level":"debug","ts":"2026-07-27T21:34:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1d0dc940-4d17-4b4a-a874-6dc8e3d6415d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa88232987eb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6ac1e77f-7df8-4dea-ab0c-bf8d022a6519"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"cbd7f247-ea90-43d8-8ce3-e28a2a121794","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-85f004.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T21:34:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d0dc940-4d17-4b4a-a874-6dc8e3d6415d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:34:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d0dc940-4d17-4b4a-a874-6dc8e3d6415d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:34:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d0dc940-4d17-4b4a-a874-6dc8e3d6415d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-85f004/auth-test-model-85f004\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-85f004/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:34:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1d0dc940-4d17-4b4a-a874-6dc8e3d6415d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T21:34:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d0dc940-4d17-4b4a-a874-6dc8e3d6415d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T21:34:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d0dc940-4d17-4b4a-a874-6dc8e3d6415d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-27T21:34:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1d0dc940-4d17-4b4a-a874-6dc8e3d6415d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T21:34:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1d0dc940-4d17-4b4a-a874-6dc8e3d6415d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T21:34:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a21ce2fe-99ac-40ad-976c-358f6e09d008","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:32876","PortSpecifier":{"PortValue":32876}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a21ce2fe-99ac-40ad-976c-358f6e09d008","method":"GET","path":"/maas-api/v1/api-keys/78509baf-13a7-444f-8b13-5e1f6f9c157f","host":"e2e-shared-b-85f004.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T21:34:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a21ce2fe-99ac-40ad-976c-358f6e09d008","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:32876","PortSpecifier":{"PortValue":32876}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785188099,"nanos":229451537},"http":{"id":"a21ce2fe-99ac-40ad-976c-358f6e09d008","method":"GET","headers":{":authority":"e2e-shared-b-85f004.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/78509baf-13a7-444f-8b13-5e1f6f9c157f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T21:34:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a21ce2fe-99ac-40ad-976c-358f6e09d008","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T21:34:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a21ce2fe-99ac-40ad-976c-358f6e09d008","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"cbd7f247-ea90-43d8-8ce3-e28a2a121794","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6ac1e77f-7df8-4dea-ab0c-bf8d022a6519"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa88232987eb"]}} {"level":"debug","ts":"2026-07-27T21:34:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a21ce2fe-99ac-40ad-976c-358f6e09d008","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa88232987eb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6ac1e77f-7df8-4dea-ab0c-bf8d022a6519"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"cbd7f247-ea90-43d8-8ce3-e28a2a121794","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-85f004.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/78509baf-13a7-444f-8b13-5e1f6f9c157f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T21:34:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a21ce2fe-99ac-40ad-976c-358f6e09d008","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:34:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a21ce2fe-99ac-40ad-976c-358f6e09d008","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:34:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a21ce2fe-99ac-40ad-976c-358f6e09d008","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-85f004/auth-test-model-85f004\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-85f004/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:34:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a21ce2fe-99ac-40ad-976c-358f6e09d008","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T21:34:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a21ce2fe-99ac-40ad-976c-358f6e09d008","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T21:34:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a21ce2fe-99ac-40ad-976c-358f6e09d008","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-27T21:34:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a21ce2fe-99ac-40ad-976c-358f6e09d008","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T21:34:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a21ce2fe-99ac-40ad-976c-358f6e09d008","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T21:34:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ff7bde4-207c-4d07-b46b-34e6a4ce9a49","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:39492","PortSpecifier":{"PortValue":39492}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8ff7bde4-207c-4d07-b46b-34e6a4ce9a49","method":"GET","path":"/maas-api/v1/api-keys/78509baf-13a7-444f-8b13-5e1f6f9c157f","host":"e2e-shared-a-c910ce.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T21:34:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ff7bde4-207c-4d07-b46b-34e6a4ce9a49","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:39492","PortSpecifier":{"PortValue":39492}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785188099,"nanos":266209559},"http":{"id":"8ff7bde4-207c-4d07-b46b-34e6a4ce9a49","method":"GET","headers":{":authority":"e2e-shared-a-c910ce.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/78509baf-13a7-444f-8b13-5e1f6f9c157f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T21:34:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8ff7bde4-207c-4d07-b46b-34e6a4ce9a49","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T21:34:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8ff7bde4-207c-4d07-b46b-34e6a4ce9a49","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"cbd7f247-ea90-43d8-8ce3-e28a2a121794","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6ac1e77f-7df8-4dea-ab0c-bf8d022a6519"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa88232987eb"]}} {"level":"debug","ts":"2026-07-27T21:34:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8ff7bde4-207c-4d07-b46b-34e6a4ce9a49","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa88232987eb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6ac1e77f-7df8-4dea-ab0c-bf8d022a6519"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"cbd7f247-ea90-43d8-8ce3-e28a2a121794","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f1ab5942392897eb6acfcbe34d1617f2f14e4794eed0129100da850801e0c30b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c910ce.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/78509baf-13a7-444f-8b13-5e1f6f9c157f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T21:34:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ff7bde4-207c-4d07-b46b-34e6a4ce9a49","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:34:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ff7bde4-207c-4d07-b46b-34e6a4ce9a49","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:34:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ff7bde4-207c-4d07-b46b-34e6a4ce9a49","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c910ce/auth-test-model-c910ce\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c910ce/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:34:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8ff7bde4-207c-4d07-b46b-34e6a4ce9a49","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T21:34:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ff7bde4-207c-4d07-b46b-34e6a4ce9a49","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T21:34:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ff7bde4-207c-4d07-b46b-34e6a4ce9a49","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-27T21:34:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ff7bde4-207c-4d07-b46b-34e6a4ce9a49","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T21:34:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ff7bde4-207c-4d07-b46b-34e6a4ce9a49","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T21:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6333c91bf0096bc0b94328ebb897c2674ef1473b4a6a5974c6fb13a55d93282a"} {"level":"info","ts":"2026-07-27T21:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac"} {"level":"info","ts":"2026-07-27T21:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/88ee61593250697a22448453bc3af1f07edb33c8f0e80cc1a16c9218ecc147da"} {"level":"info","ts":"2026-07-27T21:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4"} {"level":"info","ts":"2026-07-27T21:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f548d9b24df83b6985c39199a7d8df706c12bb11571ec33d059aeab4da48822c"} {"level":"info","ts":"2026-07-27T21:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c4b5ee3f43ec0762dd0dd2723dcce73dea05a5e839e22c680d833b9531a33e9d"} {"level":"info","ts":"2026-07-27T21:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d"} {"level":"info","ts":"2026-07-27T21:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd"} {"level":"info","ts":"2026-07-27T21:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/23111474c23b0d02eda6e2f9a3792d042628a7f1cf425187f2d5b6540fb1cab9"} {"level":"info","ts":"2026-07-27T21:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d09115d685936d1c458abed31a9384aa53e491dc0334dd6edba00e636bf320a7"} {"level":"info","ts":"2026-07-27T21:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d9548dba585c92fb7d1ab82e7d4c0a1ad4958b4b1dcaaa67345dc5dbbe1a8a21"} {"level":"info","ts":"2026-07-27T21:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/11adff635589eff16a9f57b712aba20f3b0343415ee7c04c5a391d4b030ad9c2"} {"level":"debug","ts":"2026-07-27T21:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d09115d685936d1c458abed31a9384aa53e491dc0334dd6edba00e636bf320a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:35:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:35:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d09115d685936d1c458abed31a9384aa53e491dc0334dd6edba00e636bf320a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d09115d685936d1c458abed31a9384aa53e491dc0334dd6edba00e636bf320a7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d09115d685936d1c458abed31a9384aa53e491dc0334dd6edba00e636bf320a7"} {"level":"debug","ts":"2026-07-27T21:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d09115d685936d1c458abed31a9384aa53e491dc0334dd6edba00e636bf320a7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d09115d685936d1c458abed31a9384aa53e491dc0334dd6edba00e636bf320a7"} {"level":"debug","ts":"2026-07-27T21:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d09115d685936d1c458abed31a9384aa53e491dc0334dd6edba00e636bf320a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:35:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:35:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d09115d685936d1c458abed31a9384aa53e491dc0334dd6edba00e636bf320a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d09115d685936d1c458abed31a9384aa53e491dc0334dd6edba00e636bf320a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d09115d685936d1c458abed31a9384aa53e491dc0334dd6edba00e636bf320a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:35:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:35:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d09115d685936d1c458abed31a9384aa53e491dc0334dd6edba00e636bf320a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d09115d685936d1c458abed31a9384aa53e491dc0334dd6edba00e636bf320a7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d09115d685936d1c458abed31a9384aa53e491dc0334dd6edba00e636bf320a7"} {"level":"debug","ts":"2026-07-27T21:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d09115d685936d1c458abed31a9384aa53e491dc0334dd6edba00e636bf320a7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d09115d685936d1c458abed31a9384aa53e491dc0334dd6edba00e636bf320a7"} {"level":"debug","ts":"2026-07-27T21:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d09115d685936d1c458abed31a9384aa53e491dc0334dd6edba00e636bf320a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:35:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:35:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d09115d685936d1c458abed31a9384aa53e491dc0334dd6edba00e636bf320a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d09115d685936d1c458abed31a9384aa53e491dc0334dd6edba00e636bf320a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d09115d685936d1c458abed31a9384aa53e491dc0334dd6edba00e636bf320a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:35:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:35:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d09115d685936d1c458abed31a9384aa53e491dc0334dd6edba00e636bf320a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d09115d685936d1c458abed31a9384aa53e491dc0334dd6edba00e636bf320a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d09115d685936d1c458abed31a9384aa53e491dc0334dd6edba00e636bf320a7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d09115d685936d1c458abed31a9384aa53e491dc0334dd6edba00e636bf320a7"} {"level":"debug","ts":"2026-07-27T21:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d09115d685936d1c458abed31a9384aa53e491dc0334dd6edba00e636bf320a7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d09115d685936d1c458abed31a9384aa53e491dc0334dd6edba00e636bf320a7"} {"level":"debug","ts":"2026-07-27T21:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:35:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:35:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd"} {"level":"info","ts":"2026-07-27T21:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d09115d685936d1c458abed31a9384aa53e491dc0334dd6edba00e636bf320a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:35:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:35:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d09115d685936d1c458abed31a9384aa53e491dc0334dd6edba00e636bf320a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd"} {"level":"info","ts":"2026-07-27T21:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d09115d685936d1c458abed31a9384aa53e491dc0334dd6edba00e636bf320a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:35:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:35:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d09115d685936d1c458abed31a9384aa53e491dc0334dd6edba00e636bf320a7"} {"level":"info","ts":"2026-07-27T21:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d09115d685936d1c458abed31a9384aa53e491dc0334dd6edba00e636bf320a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:35:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:35:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd"} {"level":"info","ts":"2026-07-27T21:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88ee61593250697a22448453bc3af1f07edb33c8f0e80cc1a16c9218ecc147da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:35:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:35:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88ee61593250697a22448453bc3af1f07edb33c8f0e80cc1a16c9218ecc147da"} {"level":"info","ts":"2026-07-27T21:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88ee61593250697a22448453bc3af1f07edb33c8f0e80cc1a16c9218ecc147da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd"} {"level":"debug","ts":"2026-07-27T21:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88ee61593250697a22448453bc3af1f07edb33c8f0e80cc1a16c9218ecc147da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88ee61593250697a22448453bc3af1f07edb33c8f0e80cc1a16c9218ecc147da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:35:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:35:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88ee61593250697a22448453bc3af1f07edb33c8f0e80cc1a16c9218ecc147da"} {"level":"info","ts":"2026-07-27T21:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88ee61593250697a22448453bc3af1f07edb33c8f0e80cc1a16c9218ecc147da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:35:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:35:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88ee61593250697a22448453bc3af1f07edb33c8f0e80cc1a16c9218ecc147da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88ee61593250697a22448453bc3af1f07edb33c8f0e80cc1a16c9218ecc147da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9548dba585c92fb7d1ab82e7d4c0a1ad4958b4b1dcaaa67345dc5dbbe1a8a21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:35:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:35:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9548dba585c92fb7d1ab82e7d4c0a1ad4958b4b1dcaaa67345dc5dbbe1a8a21"} {"level":"info","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd"} {"level":"info","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9548dba585c92fb7d1ab82e7d4c0a1ad4958b4b1dcaaa67345dc5dbbe1a8a21","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88ee61593250697a22448453bc3af1f07edb33c8f0e80cc1a16c9218ecc147da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:35:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:35:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88ee61593250697a22448453bc3af1f07edb33c8f0e80cc1a16c9218ecc147da"} {"level":"info","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88ee61593250697a22448453bc3af1f07edb33c8f0e80cc1a16c9218ecc147da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9548dba585c92fb7d1ab82e7d4c0a1ad4958b4b1dcaaa67345dc5dbbe1a8a21","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f548d9b24df83b6985c39199a7d8df706c12bb11571ec33d059aeab4da48822c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:35:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:35:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9548dba585c92fb7d1ab82e7d4c0a1ad4958b4b1dcaaa67345dc5dbbe1a8a21"} {"level":"info","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f548d9b24df83b6985c39199a7d8df706c12bb11571ec33d059aeab4da48822c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88ee61593250697a22448453bc3af1f07edb33c8f0e80cc1a16c9218ecc147da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:35:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:35:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88ee61593250697a22448453bc3af1f07edb33c8f0e80cc1a16c9218ecc147da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f548d9b24df83b6985c39199a7d8df706c12bb11571ec33d059aeab4da48822c"} {"level":"info","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88ee61593250697a22448453bc3af1f07edb33c8f0e80cc1a16c9218ecc147da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9548dba585c92fb7d1ab82e7d4c0a1ad4958b4b1dcaaa67345dc5dbbe1a8a21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:35:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:35:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9548dba585c92fb7d1ab82e7d4c0a1ad4958b4b1dcaaa67345dc5dbbe1a8a21"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88ee61593250697a22448453bc3af1f07edb33c8f0e80cc1a16c9218ecc147da"} {"level":"info","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f548d9b24df83b6985c39199a7d8df706c12bb11571ec33d059aeab4da48822c"} {"level":"info","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9548dba585c92fb7d1ab82e7d4c0a1ad4958b4b1dcaaa67345dc5dbbe1a8a21","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f548d9b24df83b6985c39199a7d8df706c12bb11571ec33d059aeab4da48822c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:35:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:35:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f548d9b24df83b6985c39199a7d8df706c12bb11571ec33d059aeab4da48822c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88ee61593250697a22448453bc3af1f07edb33c8f0e80cc1a16c9218ecc147da"} {"level":"info","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f548d9b24df83b6985c39199a7d8df706c12bb11571ec33d059aeab4da48822c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88ee61593250697a22448453bc3af1f07edb33c8f0e80cc1a16c9218ecc147da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9548dba585c92fb7d1ab82e7d4c0a1ad4958b4b1dcaaa67345dc5dbbe1a8a21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:35:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:35:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9548dba585c92fb7d1ab82e7d4c0a1ad4958b4b1dcaaa67345dc5dbbe1a8a21"} {"level":"info","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9548dba585c92fb7d1ab82e7d4c0a1ad4958b4b1dcaaa67345dc5dbbe1a8a21","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:35:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:35:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac"} {"level":"info","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f548d9b24df83b6985c39199a7d8df706c12bb11571ec33d059aeab4da48822c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:35:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:35:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f548d9b24df83b6985c39199a7d8df706c12bb11571ec33d059aeab4da48822c"} {"level":"info","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f548d9b24df83b6985c39199a7d8df706c12bb11571ec33d059aeab4da48822c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9548dba585c92fb7d1ab82e7d4c0a1ad4958b4b1dcaaa67345dc5dbbe1a8a21","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:35:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:35:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f548d9b24df83b6985c39199a7d8df706c12bb11571ec33d059aeab4da48822c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:35:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:35:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f548d9b24df83b6985c39199a7d8df706c12bb11571ec33d059aeab4da48822c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9548dba585c92fb7d1ab82e7d4c0a1ad4958b4b1dcaaa67345dc5dbbe1a8a21"} {"level":"info","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac"} {"level":"info","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f548d9b24df83b6985c39199a7d8df706c12bb11571ec33d059aeab4da48822c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9548dba585c92fb7d1ab82e7d4c0a1ad4958b4b1dcaaa67345dc5dbbe1a8a21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:35:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:35:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9548dba585c92fb7d1ab82e7d4c0a1ad4958b4b1dcaaa67345dc5dbbe1a8a21"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9548dba585c92fb7d1ab82e7d4c0a1ad4958b4b1dcaaa67345dc5dbbe1a8a21","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f548d9b24df83b6985c39199a7d8df706c12bb11571ec33d059aeab4da48822c"} {"level":"debug","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4b5ee3f43ec0762dd0dd2723dcce73dea05a5e839e22c680d833b9531a33e9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:35:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:35:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4b5ee3f43ec0762dd0dd2723dcce73dea05a5e839e22c680d833b9531a33e9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f548d9b24df83b6985c39199a7d8df706c12bb11571ec33d059aeab4da48822c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9548dba585c92fb7d1ab82e7d4c0a1ad4958b4b1dcaaa67345dc5dbbe1a8a21","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4b5ee3f43ec0762dd0dd2723dcce73dea05a5e839e22c680d833b9531a33e9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:35:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:35:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4b5ee3f43ec0762dd0dd2723dcce73dea05a5e839e22c680d833b9531a33e9d"} {"level":"info","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4b5ee3f43ec0762dd0dd2723dcce73dea05a5e839e22c680d833b9531a33e9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4b5ee3f43ec0762dd0dd2723dcce73dea05a5e839e22c680d833b9531a33e9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:35:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:35:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4b5ee3f43ec0762dd0dd2723dcce73dea05a5e839e22c680d833b9531a33e9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac"} {"level":"error","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c4b5ee3f43ec0762dd0dd2723dcce73dea05a5e839e22c680d833b9531a33e9d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c4b5ee3f43ec0762dd0dd2723dcce73dea05a5e839e22c680d833b9531a33e9d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4b5ee3f43ec0762dd0dd2723dcce73dea05a5e839e22c680d833b9531a33e9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:35:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:35:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4b5ee3f43ec0762dd0dd2723dcce73dea05a5e839e22c680d833b9531a33e9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9548dba585c92fb7d1ab82e7d4c0a1ad4958b4b1dcaaa67345dc5dbbe1a8a21"} {"level":"info","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4b5ee3f43ec0762dd0dd2723dcce73dea05a5e839e22c680d833b9531a33e9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4b5ee3f43ec0762dd0dd2723dcce73dea05a5e839e22c680d833b9531a33e9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:35:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:35:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4b5ee3f43ec0762dd0dd2723dcce73dea05a5e839e22c680d833b9531a33e9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c4b5ee3f43ec0762dd0dd2723dcce73dea05a5e839e22c680d833b9531a33e9d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c4b5ee3f43ec0762dd0dd2723dcce73dea05a5e839e22c680d833b9531a33e9d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11adff635589eff16a9f57b712aba20f3b0343415ee7c04c5a391d4b030ad9c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:35:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:35:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f548d9b24df83b6985c39199a7d8df706c12bb11571ec33d059aeab4da48822c"} {"level":"info","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11adff635589eff16a9f57b712aba20f3b0343415ee7c04c5a391d4b030ad9c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4b5ee3f43ec0762dd0dd2723dcce73dea05a5e839e22c680d833b9531a33e9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:35:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:35:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4b5ee3f43ec0762dd0dd2723dcce73dea05a5e839e22c680d833b9531a33e9d"} {"level":"info","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4b5ee3f43ec0762dd0dd2723dcce73dea05a5e839e22c680d833b9531a33e9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23111474c23b0d02eda6e2f9a3792d042628a7f1cf425187f2d5b6540fb1cab9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:35:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:35:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11adff635589eff16a9f57b712aba20f3b0343415ee7c04c5a391d4b030ad9c2"} {"level":"info","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23111474c23b0d02eda6e2f9a3792d042628a7f1cf425187f2d5b6540fb1cab9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11adff635589eff16a9f57b712aba20f3b0343415ee7c04c5a391d4b030ad9c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:35:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:35:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11adff635589eff16a9f57b712aba20f3b0343415ee7c04c5a391d4b030ad9c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23111474c23b0d02eda6e2f9a3792d042628a7f1cf425187f2d5b6540fb1cab9"} {"level":"info","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11adff635589eff16a9f57b712aba20f3b0343415ee7c04c5a391d4b030ad9c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4b5ee3f43ec0762dd0dd2723dcce73dea05a5e839e22c680d833b9531a33e9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23111474c23b0d02eda6e2f9a3792d042628a7f1cf425187f2d5b6540fb1cab9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:35:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:35:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23111474c23b0d02eda6e2f9a3792d042628a7f1cf425187f2d5b6540fb1cab9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4b5ee3f43ec0762dd0dd2723dcce73dea05a5e839e22c680d833b9531a33e9d"} {"level":"info","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23111474c23b0d02eda6e2f9a3792d042628a7f1cf425187f2d5b6540fb1cab9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11adff635589eff16a9f57b712aba20f3b0343415ee7c04c5a391d4b030ad9c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:35:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:35:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23111474c23b0d02eda6e2f9a3792d042628a7f1cf425187f2d5b6540fb1cab9"} {"level":"info","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4b5ee3f43ec0762dd0dd2723dcce73dea05a5e839e22c680d833b9531a33e9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:35:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:35:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4b5ee3f43ec0762dd0dd2723dcce73dea05a5e839e22c680d833b9531a33e9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11adff635589eff16a9f57b712aba20f3b0343415ee7c04c5a391d4b030ad9c2"} {"level":"info","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4b5ee3f43ec0762dd0dd2723dcce73dea05a5e839e22c680d833b9531a33e9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6333c91bf0096bc0b94328ebb897c2674ef1473b4a6a5974c6fb13a55d93282a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:35:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:35:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d"} {"level":"info","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6333c91bf0096bc0b94328ebb897c2674ef1473b4a6a5974c6fb13a55d93282a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23111474c23b0d02eda6e2f9a3792d042628a7f1cf425187f2d5b6540fb1cab9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:35:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:35:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6333c91bf0096bc0b94328ebb897c2674ef1473b4a6a5974c6fb13a55d93282a"} {"level":"info","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:35:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:35:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23111474c23b0d02eda6e2f9a3792d042628a7f1cf425187f2d5b6540fb1cab9"} {"level":"info","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4b5ee3f43ec0762dd0dd2723dcce73dea05a5e839e22c680d833b9531a33e9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6333c91bf0096bc0b94328ebb897c2674ef1473b4a6a5974c6fb13a55d93282a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:35:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:35:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6333c91bf0096bc0b94328ebb897c2674ef1473b4a6a5974c6fb13a55d93282a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4"} {"level":"info","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6333c91bf0096bc0b94328ebb897c2674ef1473b4a6a5974c6fb13a55d93282a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:35:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:35:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4b5ee3f43ec0762dd0dd2723dcce73dea05a5e839e22c680d833b9531a33e9d"} {"level":"info","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6333c91bf0096bc0b94328ebb897c2674ef1473b4a6a5974c6fb13a55d93282a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:35:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:35:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6333c91bf0096bc0b94328ebb897c2674ef1473b4a6a5974c6fb13a55d93282a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6333c91bf0096bc0b94328ebb897c2674ef1473b4a6a5974c6fb13a55d93282a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6333c91bf0096bc0b94328ebb897c2674ef1473b4a6a5974c6fb13a55d93282a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6333c91bf0096bc0b94328ebb897c2674ef1473b4a6a5974c6fb13a55d93282a"} {"level":"debug","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6333c91bf0096bc0b94328ebb897c2674ef1473b4a6a5974c6fb13a55d93282a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:35:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:35:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6333c91bf0096bc0b94328ebb897c2674ef1473b4a6a5974c6fb13a55d93282a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6333c91bf0096bc0b94328ebb897c2674ef1473b4a6a5974c6fb13a55d93282a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6333c91bf0096bc0b94328ebb897c2674ef1473b4a6a5974c6fb13a55d93282a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d"} {"level":"info","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4"} {"level":"info","ts":"2026-07-27T21:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6333c91bf0096bc0b94328ebb897c2674ef1473b4a6a5974c6fb13a55d93282a"} {"level":"info","ts":"2026-07-27T21:35:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a563015-854f-472d-a57d-595f6aa499e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:44744","PortSpecifier":{"PortValue":44744}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9a563015-854f-472d-a57d-595f6aa499e4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c910ce.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T21:35:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a563015-854f-472d-a57d-595f6aa499e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:44744","PortSpecifier":{"PortValue":44744}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785188138,"nanos":75434073},"http":{"id":"9a563015-854f-472d-a57d-595f6aa499e4","method":"POST","headers":{":authority":"e2e-shared-a-c910ce.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T21:35:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9a563015-854f-472d-a57d-595f6aa499e4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T21:35:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9a563015-854f-472d-a57d-595f6aa499e4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"cbd7f247-ea90-43d8-8ce3-e28a2a121794","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6ac1e77f-7df8-4dea-ab0c-bf8d022a6519"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa88232987eb"]}} {"level":"debug","ts":"2026-07-27T21:35:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9a563015-854f-472d-a57d-595f6aa499e4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa88232987eb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6ac1e77f-7df8-4dea-ab0c-bf8d022a6519"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"cbd7f247-ea90-43d8-8ce3-e28a2a121794","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f1ab5942392897eb6acfcbe34d1617f2f14e4794eed0129100da850801e0c30b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c910ce.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T21:35:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a563015-854f-472d-a57d-595f6aa499e4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:35:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a563015-854f-472d-a57d-595f6aa499e4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:35:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a563015-854f-472d-a57d-595f6aa499e4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c910ce/auth-test-model-c910ce\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c910ce/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:35:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9a563015-854f-472d-a57d-595f6aa499e4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T21:35:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a563015-854f-472d-a57d-595f6aa499e4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T21:35:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a563015-854f-472d-a57d-595f6aa499e4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-27T21:35:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a563015-854f-472d-a57d-595f6aa499e4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T21:35:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a563015-854f-472d-a57d-595f6aa499e4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T21:35:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"691afd85-8587-44cb-b83b-7b8bd24226f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:40516","PortSpecifier":{"PortValue":40516}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"691afd85-8587-44cb-b83b-7b8bd24226f9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-85f004.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T21:35:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"691afd85-8587-44cb-b83b-7b8bd24226f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:40516","PortSpecifier":{"PortValue":40516}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785188138,"nanos":108209244},"http":{"id":"691afd85-8587-44cb-b83b-7b8bd24226f9","method":"POST","headers":{":authority":"e2e-shared-b-85f004.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T21:35:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"691afd85-8587-44cb-b83b-7b8bd24226f9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T21:35:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"691afd85-8587-44cb-b83b-7b8bd24226f9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"cbd7f247-ea90-43d8-8ce3-e28a2a121794","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6ac1e77f-7df8-4dea-ab0c-bf8d022a6519"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa88232987eb"]}} {"level":"debug","ts":"2026-07-27T21:35:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"691afd85-8587-44cb-b83b-7b8bd24226f9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa88232987eb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6ac1e77f-7df8-4dea-ab0c-bf8d022a6519"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"cbd7f247-ea90-43d8-8ce3-e28a2a121794","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-85f004.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T21:35:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"691afd85-8587-44cb-b83b-7b8bd24226f9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:35:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"691afd85-8587-44cb-b83b-7b8bd24226f9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:35:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"691afd85-8587-44cb-b83b-7b8bd24226f9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-85f004/auth-test-model-85f004\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-85f004/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:35:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"691afd85-8587-44cb-b83b-7b8bd24226f9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T21:35:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"691afd85-8587-44cb-b83b-7b8bd24226f9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T21:35:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"691afd85-8587-44cb-b83b-7b8bd24226f9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-27T21:35:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"691afd85-8587-44cb-b83b-7b8bd24226f9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T21:35:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"691afd85-8587-44cb-b83b-7b8bd24226f9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T21:35:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1081075e-7123-48e7-b2cc-1304a7d96869","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:44748","PortSpecifier":{"PortValue":44748}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1081075e-7123-48e7-b2cc-1304a7d96869","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-c910ce.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T21:35:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1081075e-7123-48e7-b2cc-1304a7d96869","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:44748","PortSpecifier":{"PortValue":44748}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785188138,"nanos":150117969},"http":{"id":"1081075e-7123-48e7-b2cc-1304a7d96869","method":"POST","headers":{":authority":"e2e-shared-a-c910ce.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T21:35:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1081075e-7123-48e7-b2cc-1304a7d96869","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1DJiVmoBURWiIe65c_KdPAkdKl5pSvqwIudDJeWSh95i6dAGUbFEPbMCtl75J"} {"level":"debug","ts":"2026-07-27T21:35:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1081075e-7123-48e7-b2cc-1304a7d96869","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c910ce.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1DJiVmoBURWiIe65c_KdPAkdKl5pSvqwIudDJeWSh95i6dAGUbFEPbMCtl75J\"}"} {"level":"debug","ts":"2026-07-27T21:35:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1081075e-7123-48e7-b2cc-1304a7d96869","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c910ce.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fae3a70c-3205-471f-86b6-f08752a396f8","keyName":"e2e-auth-iso-a-69b181","subscription":"e2e-auth-iso-f514e4","tenant":"e2e-shared-a-c910ce","userId":"fae3a70c-3205-471f-86b6-f08752a396f8","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-27T21:35:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1081075e-7123-48e7-b2cc-1304a7d96869","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T21:35:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1081075e-7123-48e7-b2cc-1304a7d96869","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:35:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1081075e-7123-48e7-b2cc-1304a7d96869","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:35:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1081075e-7123-48e7-b2cc-1304a7d96869","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c910ce/auth-test-model-c910ce\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c910ce/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:35:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1081075e-7123-48e7-b2cc-1304a7d96869","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-27T21:35:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1081075e-7123-48e7-b2cc-1304a7d96869","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T21:35:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1081075e-7123-48e7-b2cc-1304a7d96869","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-f514e4"} {"level":"debug","ts":"2026-07-27T21:35:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1081075e-7123-48e7-b2cc-1304a7d96869","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-27T21:35:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1081075e-7123-48e7-b2cc-1304a7d96869","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T21:35:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1081075e-7123-48e7-b2cc-1304a7d96869","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T21:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4"} {"level":"info","ts":"2026-07-27T21:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1b6d8124612876237a16d9f57c0ac4c3b2bd34f4a9ad26cb3b18ceb57685c3af"} {"level":"info","ts":"2026-07-27T21:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f1ab5942392897eb6acfcbe34d1617f2f14e4794eed0129100da850801e0c30b"} {"level":"info","ts":"2026-07-27T21:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac"} {"level":"info","ts":"2026-07-27T21:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/caaf795a72a77d65ade046d43d1447c7b84aef2815b86c6410a9bbb5ddbdbc63"} {"level":"info","ts":"2026-07-27T21:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f548d9b24df83b6985c39199a7d8df706c12bb11571ec33d059aeab4da48822c"} {"level":"info","ts":"2026-07-27T21:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d9548dba585c92fb7d1ab82e7d4c0a1ad4958b4b1dcaaa67345dc5dbbe1a8a21"} {"level":"info","ts":"2026-07-27T21:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c4b5ee3f43ec0762dd0dd2723dcce73dea05a5e839e22c680d833b9531a33e9d"} {"level":"info","ts":"2026-07-27T21:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/536031e4bd5632eebfa0c5d362465a32d5fac6d190300efa90fd3a88941362b9"} {"level":"info","ts":"2026-07-27T21:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd"} {"level":"info","ts":"2026-07-27T21:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/20e23b84596b9b69fa6a86855f8c1a042f546bdd60c464ea6642f96b566f7b73"} {"level":"info","ts":"2026-07-27T21:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d"} {"level":"info","ts":"2026-07-27T21:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8c363d5e992c5288cab8a8190fadbe392bd605b24f468affb30df999394723a8"} {"level":"info","ts":"2026-07-27T21:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/11adff635589eff16a9f57b712aba20f3b0343415ee7c04c5a391d4b030ad9c2"} {"level":"info","ts":"2026-07-27T21:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0f862e86b830f8b1bd53463171c1aeb99c54086fe2312cec78896fc929eecdd1"} {"level":"info","ts":"2026-07-27T21:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cdf2c8d98571b940096aed06bec2cfd4017595027fded80cd2b0f12d12a4663e"} {"level":"info","ts":"2026-07-27T21:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/59ba6fe0a55e5a41bd8fec4a86dbaf76fdc16fa3ab5def73af2c8c37ec5e2a80"} {"level":"info","ts":"2026-07-27T21:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2745c8f09287889fba450822f604ef24a9f1323356821499c5e5d12f273dfe4c"} {"level":"info","ts":"2026-07-27T21:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6333c91bf0096bc0b94328ebb897c2674ef1473b4a6a5974c6fb13a55d93282a"} {"level":"info","ts":"2026-07-27T21:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/88ee61593250697a22448453bc3af1f07edb33c8f0e80cc1a16c9218ecc147da"} {"level":"info","ts":"2026-07-27T21:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/23111474c23b0d02eda6e2f9a3792d042628a7f1cf425187f2d5b6540fb1cab9"} {"level":"info","ts":"2026-07-27T21:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/83e113db11e1d7769f7baefdf8f53f467afa6026a796d4e809c7bb7e597f4b50"} {"level":"info","ts":"2026-07-27T21:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bacbde79a96602f6ba8410cc9aebac83db75ed849bfe9b2ccc3c03e2b4d366cd"} {"level":"info","ts":"2026-07-27T21:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d09115d685936d1c458abed31a9384aa53e491dc0334dd6edba00e636bf320a7"} {"level":"debug","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38977cfaa5be1ec5edb7895c9b1efb0ab74229e4101e469506a6b3072d77b6e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:36:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:36:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38977cfaa5be1ec5edb7895c9b1efb0ab74229e4101e469506a6b3072d77b6e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:36:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:36:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38977cfaa5be1ec5edb7895c9b1efb0ab74229e4101e469506a6b3072d77b6e5"} {"level":"info","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38977cfaa5be1ec5edb7895c9b1efb0ab74229e4101e469506a6b3072d77b6e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:36:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:36:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["38977cfaa5be1ec5edb7895c9b1efb0ab74229e4101e469506a6b3072d77b6e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d"} {"level":"info","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38977cfaa5be1ec5edb7895c9b1efb0ab74229e4101e469506a6b3072d77b6e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:36:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:36:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38977cfaa5be1ec5edb7895c9b1efb0ab74229e4101e469506a6b3072d77b6e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:36:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:36:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38977cfaa5be1ec5edb7895c9b1efb0ab74229e4101e469506a6b3072d77b6e5"} {"level":"info","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d"} {"level":"info","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38977cfaa5be1ec5edb7895c9b1efb0ab74229e4101e469506a6b3072d77b6e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38977cfaa5be1ec5edb7895c9b1efb0ab74229e4101e469506a6b3072d77b6e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"483896643cfebbff8b078f76de7898327468de8207778cb680ada2f2b32d5781","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:36:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:36:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"483896643cfebbff8b078f76de7898327468de8207778cb680ada2f2b32d5781","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38977cfaa5be1ec5edb7895c9b1efb0ab74229e4101e469506a6b3072d77b6e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:36:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:36:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38977cfaa5be1ec5edb7895c9b1efb0ab74229e4101e469506a6b3072d77b6e5"} {"level":"info","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"483896643cfebbff8b078f76de7898327468de8207778cb680ada2f2b32d5781","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38977cfaa5be1ec5edb7895c9b1efb0ab74229e4101e469506a6b3072d77b6e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:36:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:36:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["38977cfaa5be1ec5edb7895c9b1efb0ab74229e4101e469506a6b3072d77b6e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d"} {"level":"info","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/483896643cfebbff8b078f76de7898327468de8207778cb680ada2f2b32d5781"} {"level":"info","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38977cfaa5be1ec5edb7895c9b1efb0ab74229e4101e469506a6b3072d77b6e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:36:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:36:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd"} {"level":"info","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38977cfaa5be1ec5edb7895c9b1efb0ab74229e4101e469506a6b3072d77b6e5"} {"level":"info","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"483896643cfebbff8b078f76de7898327468de8207778cb680ada2f2b32d5781","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:36:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:36:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["483896643cfebbff8b078f76de7898327468de8207778cb680ada2f2b32d5781"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd"} {"level":"info","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"483896643cfebbff8b078f76de7898327468de8207778cb680ada2f2b32d5781","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38977cfaa5be1ec5edb7895c9b1efb0ab74229e4101e469506a6b3072d77b6e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:36:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:36:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8e7376ce68140ef182ce688af8c0aed26efcae473e365aa36003c7562080253"} {"level":"info","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/483896643cfebbff8b078f76de7898327468de8207778cb680ada2f2b32d5781"} {"level":"info","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8e7376ce68140ef182ce688af8c0aed26efcae473e365aa36003c7562080253","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:36:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:36:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8e7376ce68140ef182ce688af8c0aed26efcae473e365aa36003c7562080253"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd"} {"level":"info","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8e7376ce68140ef182ce688af8c0aed26efcae473e365aa36003c7562080253","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"483896643cfebbff8b078f76de7898327468de8207778cb680ada2f2b32d5781","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8e7376ce68140ef182ce688af8c0aed26efcae473e365aa36003c7562080253","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f010aab33c2e7dad29a5d0b680dd58da04578c6c5688205a2dafb6fdd421a5ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:36:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:36:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8e7376ce68140ef182ce688af8c0aed26efcae473e365aa36003c7562080253"} {"level":"info","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f010aab33c2e7dad29a5d0b680dd58da04578c6c5688205a2dafb6fdd421a5ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f010aab33c2e7dad29a5d0b680dd58da04578c6c5688205a2dafb6fdd421a5ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:36:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:36:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f010aab33c2e7dad29a5d0b680dd58da04578c6c5688205a2dafb6fdd421a5ac"} {"level":"info","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f010aab33c2e7dad29a5d0b680dd58da04578c6c5688205a2dafb6fdd421a5ac"} {"level":"info","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f010aab33c2e7dad29a5d0b680dd58da04578c6c5688205a2dafb6fdd421a5ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f010aab33c2e7dad29a5d0b680dd58da04578c6c5688205a2dafb6fdd421a5ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:36:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:36:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f010aab33c2e7dad29a5d0b680dd58da04578c6c5688205a2dafb6fdd421a5ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f010aab33c2e7dad29a5d0b680dd58da04578c6c5688205a2dafb6fdd421a5ac","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f010aab33c2e7dad29a5d0b680dd58da04578c6c5688205a2dafb6fdd421a5ac\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00859659394804fd37d93539f16101c0e2d110212a6815e32a712a6bd7c09b8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:36:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:36:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f010aab33c2e7dad29a5d0b680dd58da04578c6c5688205a2dafb6fdd421a5ac"} {"level":"info","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00859659394804fd37d93539f16101c0e2d110212a6815e32a712a6bd7c09b8d"} {"level":"info","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00859659394804fd37d93539f16101c0e2d110212a6815e32a712a6bd7c09b8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f010aab33c2e7dad29a5d0b680dd58da04578c6c5688205a2dafb6fdd421a5ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:36:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:36:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f010aab33c2e7dad29a5d0b680dd58da04578c6c5688205a2dafb6fdd421a5ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00859659394804fd37d93539f16101c0e2d110212a6815e32a712a6bd7c09b8d"} {"level":"info","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f010aab33c2e7dad29a5d0b680dd58da04578c6c5688205a2dafb6fdd421a5ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00859659394804fd37d93539f16101c0e2d110212a6815e32a712a6bd7c09b8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:36:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:36:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00859659394804fd37d93539f16101c0e2d110212a6815e32a712a6bd7c09b8d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f010aab33c2e7dad29a5d0b680dd58da04578c6c5688205a2dafb6fdd421a5ac"} {"level":"info","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00859659394804fd37d93539f16101c0e2d110212a6815e32a712a6bd7c09b8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f010aab33c2e7dad29a5d0b680dd58da04578c6c5688205a2dafb6fdd421a5ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b1ee292f832f27632ff78649e713c3f93b24b387a09270389f5c896ab2ba725","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:36:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:36:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b1ee292f832f27632ff78649e713c3f93b24b387a09270389f5c896ab2ba725"} {"level":"info","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b1ee292f832f27632ff78649e713c3f93b24b387a09270389f5c896ab2ba725","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00859659394804fd37d93539f16101c0e2d110212a6815e32a712a6bd7c09b8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:36:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:36:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00859659394804fd37d93539f16101c0e2d110212a6815e32a712a6bd7c09b8d"} {"level":"info","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00859659394804fd37d93539f16101c0e2d110212a6815e32a712a6bd7c09b8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b1ee292f832f27632ff78649e713c3f93b24b387a09270389f5c896ab2ba725","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00859659394804fd37d93539f16101c0e2d110212a6815e32a712a6bd7c09b8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:36:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:36:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00859659394804fd37d93539f16101c0e2d110212a6815e32a712a6bd7c09b8d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b1ee292f832f27632ff78649e713c3f93b24b387a09270389f5c896ab2ba725"} {"level":"info","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00859659394804fd37d93539f16101c0e2d110212a6815e32a712a6bd7c09b8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b1ee292f832f27632ff78649e713c3f93b24b387a09270389f5c896ab2ba725","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:36:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:36:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b1ee292f832f27632ff78649e713c3f93b24b387a09270389f5c896ab2ba725"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00859659394804fd37d93539f16101c0e2d110212a6815e32a712a6bd7c09b8d"} {"level":"info","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b1ee292f832f27632ff78649e713c3f93b24b387a09270389f5c896ab2ba725","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00859659394804fd37d93539f16101c0e2d110212a6815e32a712a6bd7c09b8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:36:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:36:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00859659394804fd37d93539f16101c0e2d110212a6815e32a712a6bd7c09b8d"} {"level":"info","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00859659394804fd37d93539f16101c0e2d110212a6815e32a712a6bd7c09b8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b1ee292f832f27632ff78649e713c3f93b24b387a09270389f5c896ab2ba725","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:36:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:36:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b1ee292f832f27632ff78649e713c3f93b24b387a09270389f5c896ab2ba725"} {"level":"info","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b1ee292f832f27632ff78649e713c3f93b24b387a09270389f5c896ab2ba725","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00859659394804fd37d93539f16101c0e2d110212a6815e32a712a6bd7c09b8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b1ee292f832f27632ff78649e713c3f93b24b387a09270389f5c896ab2ba725","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:36:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:36:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b1ee292f832f27632ff78649e713c3f93b24b387a09270389f5c896ab2ba725"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b1ee292f832f27632ff78649e713c3f93b24b387a09270389f5c896ab2ba725","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00859659394804fd37d93539f16101c0e2d110212a6815e32a712a6bd7c09b8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b1ee292f832f27632ff78649e713c3f93b24b387a09270389f5c896ab2ba725","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:36:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:36:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b1ee292f832f27632ff78649e713c3f93b24b387a09270389f5c896ab2ba725"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00859659394804fd37d93539f16101c0e2d110212a6815e32a712a6bd7c09b8d"} {"level":"error","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1b1ee292f832f27632ff78649e713c3f93b24b387a09270389f5c896ab2ba725","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1b1ee292f832f27632ff78649e713c3f93b24b387a09270389f5c896ab2ba725\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b1ee292f832f27632ff78649e713c3f93b24b387a09270389f5c896ab2ba725","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:36:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:36:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b1ee292f832f27632ff78649e713c3f93b24b387a09270389f5c896ab2ba725"} {"level":"info","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b1ee292f832f27632ff78649e713c3f93b24b387a09270389f5c896ab2ba725","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00859659394804fd37d93539f16101c0e2d110212a6815e32a712a6bd7c09b8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:36:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:36:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00859659394804fd37d93539f16101c0e2d110212a6815e32a712a6bd7c09b8d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00859659394804fd37d93539f16101c0e2d110212a6815e32a712a6bd7c09b8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b1ee292f832f27632ff78649e713c3f93b24b387a09270389f5c896ab2ba725","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00859659394804fd37d93539f16101c0e2d110212a6815e32a712a6bd7c09b8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cb04034098656afc56b0e52857e29cfd330dbec7b7848fb4e4661aea8f44b9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:36:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:36:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b1ee292f832f27632ff78649e713c3f93b24b387a09270389f5c896ab2ba725"} {"level":"info","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cb04034098656afc56b0e52857e29cfd330dbec7b7848fb4e4661aea8f44b9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3cb04034098656afc56b0e52857e29cfd330dbec7b7848fb4e4661aea8f44b9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b1ee292f832f27632ff78649e713c3f93b24b387a09270389f5c896ab2ba725","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:36:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:36:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b1ee292f832f27632ff78649e713c3f93b24b387a09270389f5c896ab2ba725"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00859659394804fd37d93539f16101c0e2d110212a6815e32a712a6bd7c09b8d"} {"level":"info","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b1ee292f832f27632ff78649e713c3f93b24b387a09270389f5c896ab2ba725","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cb04034098656afc56b0e52857e29cfd330dbec7b7848fb4e4661aea8f44b9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:36:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:36:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cb04034098656afc56b0e52857e29cfd330dbec7b7848fb4e4661aea8f44b9d"} {"level":"info","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cb04034098656afc56b0e52857e29cfd330dbec7b7848fb4e4661aea8f44b9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b1ee292f832f27632ff78649e713c3f93b24b387a09270389f5c896ab2ba725","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:36:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:36:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b1ee292f832f27632ff78649e713c3f93b24b387a09270389f5c896ab2ba725"} {"level":"info","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b1ee292f832f27632ff78649e713c3f93b24b387a09270389f5c896ab2ba725","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3cb04034098656afc56b0e52857e29cfd330dbec7b7848fb4e4661aea8f44b9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b1ee292f832f27632ff78649e713c3f93b24b387a09270389f5c896ab2ba725","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:36:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:36:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b1ee292f832f27632ff78649e713c3f93b24b387a09270389f5c896ab2ba725"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cb04034098656afc56b0e52857e29cfd330dbec7b7848fb4e4661aea8f44b9d"} {"level":"info","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b1ee292f832f27632ff78649e713c3f93b24b387a09270389f5c896ab2ba725","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cb04034098656afc56b0e52857e29cfd330dbec7b7848fb4e4661aea8f44b9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:36:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:36:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3cb04034098656afc56b0e52857e29cfd330dbec7b7848fb4e4661aea8f44b9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b1ee292f832f27632ff78649e713c3f93b24b387a09270389f5c896ab2ba725"} {"level":"info","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cb04034098656afc56b0e52857e29cfd330dbec7b7848fb4e4661aea8f44b9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b1ee292f832f27632ff78649e713c3f93b24b387a09270389f5c896ab2ba725","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:36:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:36:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b1ee292f832f27632ff78649e713c3f93b24b387a09270389f5c896ab2ba725","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3cb04034098656afc56b0e52857e29cfd330dbec7b7848fb4e4661aea8f44b9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a042851af3bed8721b8b10791b0fece1d8fd35225387efdbb73fb1d131e1f750","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:36:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:36:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b1ee292f832f27632ff78649e713c3f93b24b387a09270389f5c896ab2ba725"} {"level":"info","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a042851af3bed8721b8b10791b0fece1d8fd35225387efdbb73fb1d131e1f750","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b1ee292f832f27632ff78649e713c3f93b24b387a09270389f5c896ab2ba725","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:36:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:36:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b1ee292f832f27632ff78649e713c3f93b24b387a09270389f5c896ab2ba725"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cb04034098656afc56b0e52857e29cfd330dbec7b7848fb4e4661aea8f44b9d"} {"level":"info","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b1ee292f832f27632ff78649e713c3f93b24b387a09270389f5c896ab2ba725","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a042851af3bed8721b8b10791b0fece1d8fd35225387efdbb73fb1d131e1f750","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:36:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:36:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a042851af3bed8721b8b10791b0fece1d8fd35225387efdbb73fb1d131e1f750","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b1ee292f832f27632ff78649e713c3f93b24b387a09270389f5c896ab2ba725","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a042851af3bed8721b8b10791b0fece1d8fd35225387efdbb73fb1d131e1f750","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a042851af3bed8721b8b10791b0fece1d8fd35225387efdbb73fb1d131e1f750","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a042851af3bed8721b8b10791b0fece1d8fd35225387efdbb73fb1d131e1f750"} {"level":"debug","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a042851af3bed8721b8b10791b0fece1d8fd35225387efdbb73fb1d131e1f750","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:36:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:36:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a042851af3bed8721b8b10791b0fece1d8fd35225387efdbb73fb1d131e1f750"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a042851af3bed8721b8b10791b0fece1d8fd35225387efdbb73fb1d131e1f750","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b1ee292f832f27632ff78649e713c3f93b24b387a09270389f5c896ab2ba725"} {"level":"debug","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a042851af3bed8721b8b10791b0fece1d8fd35225387efdbb73fb1d131e1f750","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:36:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:36:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a042851af3bed8721b8b10791b0fece1d8fd35225387efdbb73fb1d131e1f750"} {"level":"info","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a042851af3bed8721b8b10791b0fece1d8fd35225387efdbb73fb1d131e1f750","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a042851af3bed8721b8b10791b0fece1d8fd35225387efdbb73fb1d131e1f750","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a042851af3bed8721b8b10791b0fece1d8fd35225387efdbb73fb1d131e1f750","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a042851af3bed8721b8b10791b0fece1d8fd35225387efdbb73fb1d131e1f750"} {"level":"debug","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a042851af3bed8721b8b10791b0fece1d8fd35225387efdbb73fb1d131e1f750","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:36:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:36:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a042851af3bed8721b8b10791b0fece1d8fd35225387efdbb73fb1d131e1f750"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a042851af3bed8721b8b10791b0fece1d8fd35225387efdbb73fb1d131e1f750","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b84a2a637fb3f9d1157d701c17284947147ab75b25880662afd0463cfda7412b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:36:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:36:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b84a2a637fb3f9d1157d701c17284947147ab75b25880662afd0463cfda7412b"} {"level":"info","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b84a2a637fb3f9d1157d701c17284947147ab75b25880662afd0463cfda7412b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a042851af3bed8721b8b10791b0fece1d8fd35225387efdbb73fb1d131e1f750","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:36:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:36:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a042851af3bed8721b8b10791b0fece1d8fd35225387efdbb73fb1d131e1f750","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b84a2a637fb3f9d1157d701c17284947147ab75b25880662afd0463cfda7412b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:36:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:36:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b84a2a637fb3f9d1157d701c17284947147ab75b25880662afd0463cfda7412b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a042851af3bed8721b8b10791b0fece1d8fd35225387efdbb73fb1d131e1f750"} {"level":"info","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b84a2a637fb3f9d1157d701c17284947147ab75b25880662afd0463cfda7412b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a042851af3bed8721b8b10791b0fece1d8fd35225387efdbb73fb1d131e1f750","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:36:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:36:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a042851af3bed8721b8b10791b0fece1d8fd35225387efdbb73fb1d131e1f750"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b84a2a637fb3f9d1157d701c17284947147ab75b25880662afd0463cfda7412b"} {"level":"info","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a042851af3bed8721b8b10791b0fece1d8fd35225387efdbb73fb1d131e1f750"} {"level":"info","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a042851af3bed8721b8b10791b0fece1d8fd35225387efdbb73fb1d131e1f750","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b84a2a637fb3f9d1157d701c17284947147ab75b25880662afd0463cfda7412b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:36:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:36:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b84a2a637fb3f9d1157d701c17284947147ab75b25880662afd0463cfda7412b"} {"level":"info","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b84a2a637fb3f9d1157d701c17284947147ab75b25880662afd0463cfda7412b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a042851af3bed8721b8b10791b0fece1d8fd35225387efdbb73fb1d131e1f750","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:36:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:36:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a042851af3bed8721b8b10791b0fece1d8fd35225387efdbb73fb1d131e1f750","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1ab5942392897eb6acfcbe34d1617f2f14e4794eed0129100da850801e0c30b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:36:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:36:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a042851af3bed8721b8b10791b0fece1d8fd35225387efdbb73fb1d131e1f750"} {"level":"info","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1ab5942392897eb6acfcbe34d1617f2f14e4794eed0129100da850801e0c30b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b84a2a637fb3f9d1157d701c17284947147ab75b25880662afd0463cfda7412b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:36:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:36:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b84a2a637fb3f9d1157d701c17284947147ab75b25880662afd0463cfda7412b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1ab5942392897eb6acfcbe34d1617f2f14e4794eed0129100da850801e0c30b"} {"level":"info","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b84a2a637fb3f9d1157d701c17284947147ab75b25880662afd0463cfda7412b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a042851af3bed8721b8b10791b0fece1d8fd35225387efdbb73fb1d131e1f750","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:36:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:36:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a042851af3bed8721b8b10791b0fece1d8fd35225387efdbb73fb1d131e1f750"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b84a2a637fb3f9d1157d701c17284947147ab75b25880662afd0463cfda7412b"} {"level":"info","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a042851af3bed8721b8b10791b0fece1d8fd35225387efdbb73fb1d131e1f750","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1ab5942392897eb6acfcbe34d1617f2f14e4794eed0129100da850801e0c30b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:36:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:36:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1ab5942392897eb6acfcbe34d1617f2f14e4794eed0129100da850801e0c30b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a042851af3bed8721b8b10791b0fece1d8fd35225387efdbb73fb1d131e1f750"} {"level":"info","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1ab5942392897eb6acfcbe34d1617f2f14e4794eed0129100da850801e0c30b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b84a2a637fb3f9d1157d701c17284947147ab75b25880662afd0463cfda7412b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b06cd514f983bd8ab355f27e1220f7e60db97328ca3ec8853e997d43125e7dae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:36:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:36:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1ab5942392897eb6acfcbe34d1617f2f14e4794eed0129100da850801e0c30b"} {"level":"info","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b06cd514f983bd8ab355f27e1220f7e60db97328ca3ec8853e997d43125e7dae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a042851af3bed8721b8b10791b0fece1d8fd35225387efdbb73fb1d131e1f750","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b14ca91fdf3cc40c87c45c0d71cd0729f0063ed7938b8a70201357e18e3686fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:36:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:36:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b84a2a637fb3f9d1157d701c17284947147ab75b25880662afd0463cfda7412b"} {"level":"info","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b14ca91fdf3cc40c87c45c0d71cd0729f0063ed7938b8a70201357e18e3686fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1ab5942392897eb6acfcbe34d1617f2f14e4794eed0129100da850801e0c30b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:36:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:36:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b06cd514f983bd8ab355f27e1220f7e60db97328ca3ec8853e997d43125e7dae"} {"level":"info","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b06cd514f983bd8ab355f27e1220f7e60db97328ca3ec8853e997d43125e7dae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:36:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:36:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b06cd514f983bd8ab355f27e1220f7e60db97328ca3ec8853e997d43125e7dae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a042851af3bed8721b8b10791b0fece1d8fd35225387efdbb73fb1d131e1f750"} {"level":"info","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b06cd514f983bd8ab355f27e1220f7e60db97328ca3ec8853e997d43125e7dae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdf2c8d98571b940096aed06bec2cfd4017595027fded80cd2b0f12d12a4663e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:36:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:36:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b14ca91fdf3cc40c87c45c0d71cd0729f0063ed7938b8a70201357e18e3686fe"} {"level":"info","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdf2c8d98571b940096aed06bec2cfd4017595027fded80cd2b0f12d12a4663e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b14ca91fdf3cc40c87c45c0d71cd0729f0063ed7938b8a70201357e18e3686fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:36:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:36:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b14ca91fdf3cc40c87c45c0d71cd0729f0063ed7938b8a70201357e18e3686fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac"} {"level":"info","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1ab5942392897eb6acfcbe34d1617f2f14e4794eed0129100da850801e0c30b"} {"level":"info","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b14ca91fdf3cc40c87c45c0d71cd0729f0063ed7938b8a70201357e18e3686fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:36:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:36:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdf2c8d98571b940096aed06bec2cfd4017595027fded80cd2b0f12d12a4663e"} {"level":"info","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec9ee1ed1185bfd7b1ddf227f2115f33af7477e259b75244489f57f1ffbd6381"} {"level":"info","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b06cd514f983bd8ab355f27e1220f7e60db97328ca3ec8853e997d43125e7dae"} {"level":"info","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec9ee1ed1185bfd7b1ddf227f2115f33af7477e259b75244489f57f1ffbd6381","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:36:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:36:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec9ee1ed1185bfd7b1ddf227f2115f33af7477e259b75244489f57f1ffbd6381"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4"} {"level":"info","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/717c809ab63690c9b6d64a44a81082c70aca934dd794045364794d7dda78ad7c"} {"level":"info","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec9ee1ed1185bfd7b1ddf227f2115f33af7477e259b75244489f57f1ffbd6381","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b06cd514f983bd8ab355f27e1220f7e60db97328ca3ec8853e997d43125e7dae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:36:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:36:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caaf795a72a77d65ade046d43d1447c7b84aef2815b86c6410a9bbb5ddbdbc63"} {"level":"info","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fd362a135f2d606b8bb8b768bfbaa536431b6cb830fe525129058e1b89bca99"} {"level":"info","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b14ca91fdf3cc40c87c45c0d71cd0729f0063ed7938b8a70201357e18e3686fe"} {"level":"info","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdf2c8d98571b940096aed06bec2cfd4017595027fded80cd2b0f12d12a4663e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:36:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:36:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cdf2c8d98571b940096aed06bec2cfd4017595027fded80cd2b0f12d12a4663e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83e113db11e1d7769f7baefdf8f53f467afa6026a796d4e809c7bb7e597f4b50"} {"level":"info","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0ddd035e9366e303fbbd631de50ec6043c590cdfc67a543175b89f7c6c1118b"} {"level":"info","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdf2c8d98571b940096aed06bec2cfd4017595027fded80cd2b0f12d12a4663e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"717c809ab63690c9b6d64a44a81082c70aca934dd794045364794d7dda78ad7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:36:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:36:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["717c809ab63690c9b6d64a44a81082c70aca934dd794045364794d7dda78ad7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac"} {"level":"info","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/941d9a6228d1c2e2c0cc706c57ce800929cd96ad915288e9f787ccaf21ab5ae6"} {"level":"info","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec9ee1ed1185bfd7b1ddf227f2115f33af7477e259b75244489f57f1ffbd6381"} {"level":"info","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"717c809ab63690c9b6d64a44a81082c70aca934dd794045364794d7dda78ad7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caaf795a72a77d65ade046d43d1447c7b84aef2815b86c6410a9bbb5ddbdbc63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:36:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:36:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["caaf795a72a77d65ade046d43d1447c7b84aef2815b86c6410a9bbb5ddbdbc63"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4"} {"level":"info","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdf2c8d98571b940096aed06bec2cfd4017595027fded80cd2b0f12d12a4663e"} {"level":"info","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/717c809ab63690c9b6d64a44a81082c70aca934dd794045364794d7dda78ad7c"} {"level":"info","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caaf795a72a77d65ade046d43d1447c7b84aef2815b86c6410a9bbb5ddbdbc63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fd362a135f2d606b8bb8b768bfbaa536431b6cb830fe525129058e1b89bca99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:36:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:36:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2fd362a135f2d606b8bb8b768bfbaa536431b6cb830fe525129058e1b89bca99"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caaf795a72a77d65ade046d43d1447c7b84aef2815b86c6410a9bbb5ddbdbc63"} {"level":"info","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fd362a135f2d606b8bb8b768bfbaa536431b6cb830fe525129058e1b89bca99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b14ca91fdf3cc40c87c45c0d71cd0729f0063ed7938b8a70201357e18e3686fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83e113db11e1d7769f7baefdf8f53f467afa6026a796d4e809c7bb7e597f4b50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:36:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:36:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83e113db11e1d7769f7baefdf8f53f467afa6026a796d4e809c7bb7e597f4b50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fd362a135f2d606b8bb8b768bfbaa536431b6cb830fe525129058e1b89bca99"} {"level":"info","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83e113db11e1d7769f7baefdf8f53f467afa6026a796d4e809c7bb7e597f4b50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0ddd035e9366e303fbbd631de50ec6043c590cdfc67a543175b89f7c6c1118b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:36:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:36:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0ddd035e9366e303fbbd631de50ec6043c590cdfc67a543175b89f7c6c1118b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83e113db11e1d7769f7baefdf8f53f467afa6026a796d4e809c7bb7e597f4b50"} {"level":"info","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0ddd035e9366e303fbbd631de50ec6043c590cdfc67a543175b89f7c6c1118b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"941d9a6228d1c2e2c0cc706c57ce800929cd96ad915288e9f787ccaf21ab5ae6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:36:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:36:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["941d9a6228d1c2e2c0cc706c57ce800929cd96ad915288e9f787ccaf21ab5ae6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"941d9a6228d1c2e2c0cc706c57ce800929cd96ad915288e9f787ccaf21ab5ae6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec9ee1ed1185bfd7b1ddf227f2115f33af7477e259b75244489f57f1ffbd6381","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdf2c8d98571b940096aed06bec2cfd4017595027fded80cd2b0f12d12a4663e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"717c809ab63690c9b6d64a44a81082c70aca934dd794045364794d7dda78ad7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caaf795a72a77d65ade046d43d1447c7b84aef2815b86c6410a9bbb5ddbdbc63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fd362a135f2d606b8bb8b768bfbaa536431b6cb830fe525129058e1b89bca99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83e113db11e1d7769f7baefdf8f53f467afa6026a796d4e809c7bb7e597f4b50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0ddd035e9366e303fbbd631de50ec6043c590cdfc67a543175b89f7c6c1118b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:36:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:36:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0ddd035e9366e303fbbd631de50ec6043c590cdfc67a543175b89f7c6c1118b"} {"level":"info","ts":"2026-07-27T21:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/941d9a6228d1c2e2c0cc706c57ce800929cd96ad915288e9f787ccaf21ab5ae6"} {"level":"info","ts":"2026-07-27T21:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0ddd035e9366e303fbbd631de50ec6043c590cdfc67a543175b89f7c6c1118b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"941d9a6228d1c2e2c0cc706c57ce800929cd96ad915288e9f787ccaf21ab5ae6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0ddd035e9366e303fbbd631de50ec6043c590cdfc67a543175b89f7c6c1118b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:36:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:36:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0ddd035e9366e303fbbd631de50ec6043c590cdfc67a543175b89f7c6c1118b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0ddd035e9366e303fbbd631de50ec6043c590cdfc67a543175b89f7c6c1118b"} {"level":"info","ts":"2026-07-27T21:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0ddd035e9366e303fbbd631de50ec6043c590cdfc67a543175b89f7c6c1118b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0ddd035e9366e303fbbd631de50ec6043c590cdfc67a543175b89f7c6c1118b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0ddd035e9366e303fbbd631de50ec6043c590cdfc67a543175b89f7c6c1118b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:36:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:36:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0ddd035e9366e303fbbd631de50ec6043c590cdfc67a543175b89f7c6c1118b"} {"level":"info","ts":"2026-07-27T21:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0ddd035e9366e303fbbd631de50ec6043c590cdfc67a543175b89f7c6c1118b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0ddd035e9366e303fbbd631de50ec6043c590cdfc67a543175b89f7c6c1118b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0ddd035e9366e303fbbd631de50ec6043c590cdfc67a543175b89f7c6c1118b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0ddd035e9366e303fbbd631de50ec6043c590cdfc67a543175b89f7c6c1118b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0ddd035e9366e303fbbd631de50ec6043c590cdfc67a543175b89f7c6c1118b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0ddd035e9366e303fbbd631de50ec6043c590cdfc67a543175b89f7c6c1118b"} {"level":"debug","ts":"2026-07-27T21:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0ddd035e9366e303fbbd631de50ec6043c590cdfc67a543175b89f7c6c1118b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:36:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:36:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0ddd035e9366e303fbbd631de50ec6043c590cdfc67a543175b89f7c6c1118b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0ddd035e9366e303fbbd631de50ec6043c590cdfc67a543175b89f7c6c1118b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0ddd035e9366e303fbbd631de50ec6043c590cdfc67a543175b89f7c6c1118b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:36:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:36:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0ddd035e9366e303fbbd631de50ec6043c590cdfc67a543175b89f7c6c1118b"} {"level":"info","ts":"2026-07-27T21:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0ddd035e9366e303fbbd631de50ec6043c590cdfc67a543175b89f7c6c1118b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0ddd035e9366e303fbbd631de50ec6043c590cdfc67a543175b89f7c6c1118b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0ddd035e9366e303fbbd631de50ec6043c590cdfc67a543175b89f7c6c1118b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0ddd035e9366e303fbbd631de50ec6043c590cdfc67a543175b89f7c6c1118b"} {"level":"debug","ts":"2026-07-27T21:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0ddd035e9366e303fbbd631de50ec6043c590cdfc67a543175b89f7c6c1118b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:36:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:36:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0ddd035e9366e303fbbd631de50ec6043c590cdfc67a543175b89f7c6c1118b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0ddd035e9366e303fbbd631de50ec6043c590cdfc67a543175b89f7c6c1118b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0ddd035e9366e303fbbd631de50ec6043c590cdfc67a543175b89f7c6c1118b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:36:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:36:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0ddd035e9366e303fbbd631de50ec6043c590cdfc67a543175b89f7c6c1118b"} {"level":"info","ts":"2026-07-27T21:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0ddd035e9366e303fbbd631de50ec6043c590cdfc67a543175b89f7c6c1118b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0ddd035e9366e303fbbd631de50ec6043c590cdfc67a543175b89f7c6c1118b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0ddd035e9366e303fbbd631de50ec6043c590cdfc67a543175b89f7c6c1118b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0ddd035e9366e303fbbd631de50ec6043c590cdfc67a543175b89f7c6c1118b"} {"level":"debug","ts":"2026-07-27T21:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0ddd035e9366e303fbbd631de50ec6043c590cdfc67a543175b89f7c6c1118b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:36:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:36:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0ddd035e9366e303fbbd631de50ec6043c590cdfc67a543175b89f7c6c1118b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0ddd035e9366e303fbbd631de50ec6043c590cdfc67a543175b89f7c6c1118b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0ddd035e9366e303fbbd631de50ec6043c590cdfc67a543175b89f7c6c1118b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:36:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:36:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0ddd035e9366e303fbbd631de50ec6043c590cdfc67a543175b89f7c6c1118b"} {"level":"info","ts":"2026-07-27T21:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0ddd035e9366e303fbbd631de50ec6043c590cdfc67a543175b89f7c6c1118b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0ddd035e9366e303fbbd631de50ec6043c590cdfc67a543175b89f7c6c1118b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0ddd035e9366e303fbbd631de50ec6043c590cdfc67a543175b89f7c6c1118b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0ddd035e9366e303fbbd631de50ec6043c590cdfc67a543175b89f7c6c1118b"} {"level":"debug","ts":"2026-07-27T21:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0ddd035e9366e303fbbd631de50ec6043c590cdfc67a543175b89f7c6c1118b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:36:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:36:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0ddd035e9366e303fbbd631de50ec6043c590cdfc67a543175b89f7c6c1118b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0ddd035e9366e303fbbd631de50ec6043c590cdfc67a543175b89f7c6c1118b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0ddd035e9366e303fbbd631de50ec6043c590cdfc67a543175b89f7c6c1118b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:36:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:36:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0ddd035e9366e303fbbd631de50ec6043c590cdfc67a543175b89f7c6c1118b"} {"level":"info","ts":"2026-07-27T21:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0ddd035e9366e303fbbd631de50ec6043c590cdfc67a543175b89f7c6c1118b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0ddd035e9366e303fbbd631de50ec6043c590cdfc67a543175b89f7c6c1118b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0ddd035e9366e303fbbd631de50ec6043c590cdfc67a543175b89f7c6c1118b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0ddd035e9366e303fbbd631de50ec6043c590cdfc67a543175b89f7c6c1118b"} {"level":"debug","ts":"2026-07-27T21:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0ddd035e9366e303fbbd631de50ec6043c590cdfc67a543175b89f7c6c1118b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:36:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:36:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0ddd035e9366e303fbbd631de50ec6043c590cdfc67a543175b89f7c6c1118b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0ddd035e9366e303fbbd631de50ec6043c590cdfc67a543175b89f7c6c1118b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0ddd035e9366e303fbbd631de50ec6043c590cdfc67a543175b89f7c6c1118b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:36:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:36:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0ddd035e9366e303fbbd631de50ec6043c590cdfc67a543175b89f7c6c1118b"} {"level":"info","ts":"2026-07-27T21:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0ddd035e9366e303fbbd631de50ec6043c590cdfc67a543175b89f7c6c1118b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0ddd035e9366e303fbbd631de50ec6043c590cdfc67a543175b89f7c6c1118b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0ddd035e9366e303fbbd631de50ec6043c590cdfc67a543175b89f7c6c1118b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0ddd035e9366e303fbbd631de50ec6043c590cdfc67a543175b89f7c6c1118b"} {"level":"debug","ts":"2026-07-27T21:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0ddd035e9366e303fbbd631de50ec6043c590cdfc67a543175b89f7c6c1118b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:36:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:36:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0ddd035e9366e303fbbd631de50ec6043c590cdfc67a543175b89f7c6c1118b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0ddd035e9366e303fbbd631de50ec6043c590cdfc67a543175b89f7c6c1118b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0ddd035e9366e303fbbd631de50ec6043c590cdfc67a543175b89f7c6c1118b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0ddd035e9366e303fbbd631de50ec6043c590cdfc67a543175b89f7c6c1118b"} {"level":"info","ts":"2026-07-27T21:36:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8453e14c-ff95-4348-bf82-b5d6d379f54d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:54254","PortSpecifier":{"PortValue":54254}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8453e14c-ff95-4348-bf82-b5d6d379f54d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c910ce.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T21:36:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8453e14c-ff95-4348-bf82-b5d6d379f54d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:54254","PortSpecifier":{"PortValue":54254}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785188217,"nanos":225758235},"http":{"id":"8453e14c-ff95-4348-bf82-b5d6d379f54d","method":"POST","headers":{":authority":"e2e-shared-a-c910ce.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T21:36:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8453e14c-ff95-4348-bf82-b5d6d379f54d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T21:36:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8453e14c-ff95-4348-bf82-b5d6d379f54d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"cbd7f247-ea90-43d8-8ce3-e28a2a121794","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6ac1e77f-7df8-4dea-ab0c-bf8d022a6519"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa88232987eb"]}} {"level":"debug","ts":"2026-07-27T21:36:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8453e14c-ff95-4348-bf82-b5d6d379f54d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa88232987eb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6ac1e77f-7df8-4dea-ab0c-bf8d022a6519"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"cbd7f247-ea90-43d8-8ce3-e28a2a121794","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f1ab5942392897eb6acfcbe34d1617f2f14e4794eed0129100da850801e0c30b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c910ce.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T21:36:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8453e14c-ff95-4348-bf82-b5d6d379f54d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:36:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8453e14c-ff95-4348-bf82-b5d6d379f54d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:36:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8453e14c-ff95-4348-bf82-b5d6d379f54d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c910ce/sub-test-model-c910ce\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c910ce/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:36:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8453e14c-ff95-4348-bf82-b5d6d379f54d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T21:36:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8453e14c-ff95-4348-bf82-b5d6d379f54d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T21:36:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8453e14c-ff95-4348-bf82-b5d6d379f54d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-27T21:36:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8453e14c-ff95-4348-bf82-b5d6d379f54d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T21:36:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8453e14c-ff95-4348-bf82-b5d6d379f54d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T21:36:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"440be661-2084-4558-bd9e-f8f2471ad278","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:51164","PortSpecifier":{"PortValue":51164}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"440be661-2084-4558-bd9e-f8f2471ad278","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-85f004.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T21:36:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"440be661-2084-4558-bd9e-f8f2471ad278","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:51164","PortSpecifier":{"PortValue":51164}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785188217,"nanos":267905411},"http":{"id":"440be661-2084-4558-bd9e-f8f2471ad278","method":"POST","headers":{":authority":"e2e-shared-b-85f004.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T21:36:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"440be661-2084-4558-bd9e-f8f2471ad278","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T21:36:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"440be661-2084-4558-bd9e-f8f2471ad278","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"cbd7f247-ea90-43d8-8ce3-e28a2a121794","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6ac1e77f-7df8-4dea-ab0c-bf8d022a6519"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa88232987eb"]}} {"level":"debug","ts":"2026-07-27T21:36:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"440be661-2084-4558-bd9e-f8f2471ad278","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa88232987eb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6ac1e77f-7df8-4dea-ab0c-bf8d022a6519"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"cbd7f247-ea90-43d8-8ce3-e28a2a121794","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-85f004.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T21:36:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"440be661-2084-4558-bd9e-f8f2471ad278","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:36:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"440be661-2084-4558-bd9e-f8f2471ad278","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:36:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"440be661-2084-4558-bd9e-f8f2471ad278","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-85f004/sub-test-model-85f004\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-85f004/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:36:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"440be661-2084-4558-bd9e-f8f2471ad278","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T21:36:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"440be661-2084-4558-bd9e-f8f2471ad278","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T21:36:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"440be661-2084-4558-bd9e-f8f2471ad278","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-27T21:36:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"440be661-2084-4558-bd9e-f8f2471ad278","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T21:36:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"440be661-2084-4558-bd9e-f8f2471ad278","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T21:36:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7e8fc75e-ae21-4aed-a741-3bdaf9260385","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:54270","PortSpecifier":{"PortValue":54270}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7e8fc75e-ae21-4aed-a741-3bdaf9260385","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-c910ce.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T21:36:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7e8fc75e-ae21-4aed-a741-3bdaf9260385","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:54270","PortSpecifier":{"PortValue":54270}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785188217,"nanos":307629494},"http":{"id":"7e8fc75e-ae21-4aed-a741-3bdaf9260385","method":"GET","headers":{":authority":"e2e-shared-a-c910ce.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T21:36:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7e8fc75e-ae21-4aed-a741-3bdaf9260385","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-OzLsFRMdDPn2RJzt_ErPTU3OgKtYRGZ1C2pDK9BBkjqSIiv8QiSyhafy7PdG"} {"level":"debug","ts":"2026-07-27T21:36:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7e8fc75e-ae21-4aed-a741-3bdaf9260385","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c910ce.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-OzLsFRMdDPn2RJzt_ErPTU3OgKtYRGZ1C2pDK9BBkjqSIiv8QiSyhafy7PdG\"}"} {"level":"debug","ts":"2026-07-27T21:36:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7e8fc75e-ae21-4aed-a741-3bdaf9260385","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c910ce.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"996d8515-5709-4bf8-b17f-255bb9bbae35","keyName":"e2e-sub-iso-54e312","subscription":"e2e-a-only-616b35","tenant":"e2e-shared-a-c910ce","userId":"996d8515-5709-4bf8-b17f-255bb9bbae35","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-27T21:36:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7e8fc75e-ae21-4aed-a741-3bdaf9260385","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T21:36:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e8fc75e-ae21-4aed-a741-3bdaf9260385","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:36:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e8fc75e-ae21-4aed-a741-3bdaf9260385","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:36:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e8fc75e-ae21-4aed-a741-3bdaf9260385","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c910ce/sub-test-model-c910ce\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c910ce/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:36:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7e8fc75e-ae21-4aed-a741-3bdaf9260385","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-616b35"} {"level":"debug","ts":"2026-07-27T21:36:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7e8fc75e-ae21-4aed-a741-3bdaf9260385","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T21:36:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7e8fc75e-ae21-4aed-a741-3bdaf9260385","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-27T21:36:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7e8fc75e-ae21-4aed-a741-3bdaf9260385","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-27T21:36:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7e8fc75e-ae21-4aed-a741-3bdaf9260385","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T21:36:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7e8fc75e-ae21-4aed-a741-3bdaf9260385","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T21:36:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"91305f93-0e69-4e27-a6f0-27e93f3b2dd5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:51174","PortSpecifier":{"PortValue":51174}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"91305f93-0e69-4e27-a6f0-27e93f3b2dd5","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-85f004.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T21:36:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"91305f93-0e69-4e27-a6f0-27e93f3b2dd5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:51174","PortSpecifier":{"PortValue":51174}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785188217,"nanos":347756081},"http":{"id":"91305f93-0e69-4e27-a6f0-27e93f3b2dd5","method":"GET","headers":{":authority":"e2e-shared-b-85f004.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T21:36:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"91305f93-0e69-4e27-a6f0-27e93f3b2dd5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-CU4dOJzbs082AUDa_sd6v2evBmEOLaChsFkHjE2gGIrKah0HiHyCcFRG3z53"} {"level":"debug","ts":"2026-07-27T21:36:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"91305f93-0e69-4e27-a6f0-27e93f3b2dd5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-85f004.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-CU4dOJzbs082AUDa_sd6v2evBmEOLaChsFkHjE2gGIrKah0HiHyCcFRG3z53\"}"} {"level":"debug","ts":"2026-07-27T21:36:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"91305f93-0e69-4e27-a6f0-27e93f3b2dd5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-85f004.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1c78b8c2-800b-4f35-ac53-5aa7d58fcb45","keyName":"e2e-sub-iso-82dc10","subscription":"e2e-b-only-616b35","tenant":"e2e-shared-b-85f004","userId":"1c78b8c2-800b-4f35-ac53-5aa7d58fcb45","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-27T21:36:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"91305f93-0e69-4e27-a6f0-27e93f3b2dd5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T21:36:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"91305f93-0e69-4e27-a6f0-27e93f3b2dd5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:36:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"91305f93-0e69-4e27-a6f0-27e93f3b2dd5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:36:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"91305f93-0e69-4e27-a6f0-27e93f3b2dd5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-85f004/sub-test-model-85f004\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-85f004/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:36:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"91305f93-0e69-4e27-a6f0-27e93f3b2dd5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T21:36:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"91305f93-0e69-4e27-a6f0-27e93f3b2dd5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-27T21:36:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"91305f93-0e69-4e27-a6f0-27e93f3b2dd5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-616b35"} {"level":"debug","ts":"2026-07-27T21:36:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"91305f93-0e69-4e27-a6f0-27e93f3b2dd5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-27T21:36:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"91305f93-0e69-4e27-a6f0-27e93f3b2dd5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T21:36:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"91305f93-0e69-4e27-a6f0-27e93f3b2dd5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T21:37:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d2aee26b-fa4c-4f63-a5ce-5a6ab74f2373","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:47452","PortSpecifier":{"PortValue":47452}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d2aee26b-fa4c-4f63-a5ce-5a6ab74f2373","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c910ce.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T21:37:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d2aee26b-fa4c-4f63-a5ce-5a6ab74f2373","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:47452","PortSpecifier":{"PortValue":47452}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785188237,"nanos":828363957},"http":{"id":"d2aee26b-fa4c-4f63-a5ce-5a6ab74f2373","method":"POST","headers":{":authority":"e2e-shared-a-c910ce.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T21:37:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d2aee26b-fa4c-4f63-a5ce-5a6ab74f2373","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T21:37:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d2aee26b-fa4c-4f63-a5ce-5a6ab74f2373","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"cbd7f247-ea90-43d8-8ce3-e28a2a121794","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6ac1e77f-7df8-4dea-ab0c-bf8d022a6519"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa88232987eb"]}} {"level":"debug","ts":"2026-07-27T21:37:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d2aee26b-fa4c-4f63-a5ce-5a6ab74f2373","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa88232987eb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6ac1e77f-7df8-4dea-ab0c-bf8d022a6519"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"cbd7f247-ea90-43d8-8ce3-e28a2a121794","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f1ab5942392897eb6acfcbe34d1617f2f14e4794eed0129100da850801e0c30b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c910ce.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T21:37:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2aee26b-fa4c-4f63-a5ce-5a6ab74f2373","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:37:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2aee26b-fa4c-4f63-a5ce-5a6ab74f2373","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:37:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2aee26b-fa4c-4f63-a5ce-5a6ab74f2373","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c910ce/sub-test-model-c910ce\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c910ce/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:37:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d2aee26b-fa4c-4f63-a5ce-5a6ab74f2373","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T21:37:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d2aee26b-fa4c-4f63-a5ce-5a6ab74f2373","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T21:37:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d2aee26b-fa4c-4f63-a5ce-5a6ab74f2373","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-27T21:37:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d2aee26b-fa4c-4f63-a5ce-5a6ab74f2373","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T21:37:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d2aee26b-fa4c-4f63-a5ce-5a6ab74f2373","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T21:37:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e7727326-0886-4e5a-a0e6-b3cf3be74547","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:47868","PortSpecifier":{"PortValue":47868}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e7727326-0886-4e5a-a0e6-b3cf3be74547","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-85f004.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T21:37:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e7727326-0886-4e5a-a0e6-b3cf3be74547","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:47868","PortSpecifier":{"PortValue":47868}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785188237,"nanos":875209944},"http":{"id":"e7727326-0886-4e5a-a0e6-b3cf3be74547","method":"POST","headers":{":authority":"e2e-shared-b-85f004.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T21:37:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e7727326-0886-4e5a-a0e6-b3cf3be74547","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T21:37:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e7727326-0886-4e5a-a0e6-b3cf3be74547","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"cbd7f247-ea90-43d8-8ce3-e28a2a121794","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6ac1e77f-7df8-4dea-ab0c-bf8d022a6519"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa88232987eb"]}} {"level":"debug","ts":"2026-07-27T21:37:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e7727326-0886-4e5a-a0e6-b3cf3be74547","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa88232987eb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6ac1e77f-7df8-4dea-ab0c-bf8d022a6519"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"cbd7f247-ea90-43d8-8ce3-e28a2a121794","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-85f004.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T21:37:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7727326-0886-4e5a-a0e6-b3cf3be74547","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:37:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7727326-0886-4e5a-a0e6-b3cf3be74547","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:37:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7727326-0886-4e5a-a0e6-b3cf3be74547","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-85f004/sub-test-model-85f004\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-85f004/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:37:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e7727326-0886-4e5a-a0e6-b3cf3be74547","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T21:37:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7727326-0886-4e5a-a0e6-b3cf3be74547","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T21:37:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7727326-0886-4e5a-a0e6-b3cf3be74547","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-27T21:37:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e7727326-0886-4e5a-a0e6-b3cf3be74547","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T21:37:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e7727326-0886-4e5a-a0e6-b3cf3be74547","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T21:37:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6e9696cf-bdbf-4ef4-869b-526bb525521c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:47460","PortSpecifier":{"PortValue":47460}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6e9696cf-bdbf-4ef4-869b-526bb525521c","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-c910ce.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T21:37:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6e9696cf-bdbf-4ef4-869b-526bb525521c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:47460","PortSpecifier":{"PortValue":47460}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785188237,"nanos":923408130},"http":{"id":"6e9696cf-bdbf-4ef4-869b-526bb525521c","method":"POST","headers":{":authority":"e2e-shared-a-c910ce.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T21:37:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6e9696cf-bdbf-4ef4-869b-526bb525521c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-zMzMJByZreR5FKnb_NOVpVjhTNa49SbxZXBcO3JI6Wqi59x3HCFNZiYcnhzM"} {"level":"debug","ts":"2026-07-27T21:37:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6e9696cf-bdbf-4ef4-869b-526bb525521c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c910ce.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-zMzMJByZreR5FKnb_NOVpVjhTNa49SbxZXBcO3JI6Wqi59x3HCFNZiYcnhzM\"}"} {"level":"debug","ts":"2026-07-27T21:37:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6e9696cf-bdbf-4ef4-869b-526bb525521c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c910ce.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"795cb9f9-94d3-469b-9ce8-1da4b56b8da5","keyName":"e2e-sub-iso-79dbc5","subscription":"e2e-shared-sub-aa8f8d","tenant":"e2e-shared-a-c910ce","userId":"795cb9f9-94d3-469b-9ce8-1da4b56b8da5","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-27T21:37:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6e9696cf-bdbf-4ef4-869b-526bb525521c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T21:37:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6e9696cf-bdbf-4ef4-869b-526bb525521c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:37:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6e9696cf-bdbf-4ef4-869b-526bb525521c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:37:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6e9696cf-bdbf-4ef4-869b-526bb525521c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c910ce/sub-test-model-c910ce\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c910ce/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:37:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6e9696cf-bdbf-4ef4-869b-526bb525521c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T21:37:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6e9696cf-bdbf-4ef4-869b-526bb525521c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-aa8f8d"} {"level":"debug","ts":"2026-07-27T21:37:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6e9696cf-bdbf-4ef4-869b-526bb525521c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-27T21:37:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6e9696cf-bdbf-4ef4-869b-526bb525521c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-27T21:37:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6e9696cf-bdbf-4ef4-869b-526bb525521c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T21:37:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6e9696cf-bdbf-4ef4-869b-526bb525521c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T21:37:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e16979c-ae7b-4dc1-9eaa-84770507c8fc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:47876","PortSpecifier":{"PortValue":47876}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2e16979c-ae7b-4dc1-9eaa-84770507c8fc","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-85f004.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T21:37:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e16979c-ae7b-4dc1-9eaa-84770507c8fc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:47876","PortSpecifier":{"PortValue":47876}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785188237,"nanos":956154035},"http":{"id":"2e16979c-ae7b-4dc1-9eaa-84770507c8fc","method":"POST","headers":{":authority":"e2e-shared-b-85f004.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T21:37:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2e16979c-ae7b-4dc1-9eaa-84770507c8fc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-nx2O8awIbqBMgSlm_9ih03hnPhkKqd6x2ZKSIVm2D4JFt7xh8z7huETzanOG"} {"level":"debug","ts":"2026-07-27T21:37:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2e16979c-ae7b-4dc1-9eaa-84770507c8fc","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-85f004.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-nx2O8awIbqBMgSlm_9ih03hnPhkKqd6x2ZKSIVm2D4JFt7xh8z7huETzanOG\"}"} {"level":"debug","ts":"2026-07-27T21:37:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2e16979c-ae7b-4dc1-9eaa-84770507c8fc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-85f004.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d1756136-7fd6-4367-8cd2-d519d213d368","keyName":"e2e-sub-iso-847f11","subscription":"e2e-shared-sub-aa8f8d","tenant":"e2e-shared-b-85f004","userId":"d1756136-7fd6-4367-8cd2-d519d213d368","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-27T21:37:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2e16979c-ae7b-4dc1-9eaa-84770507c8fc","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T21:37:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e16979c-ae7b-4dc1-9eaa-84770507c8fc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:37:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e16979c-ae7b-4dc1-9eaa-84770507c8fc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:37:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e16979c-ae7b-4dc1-9eaa-84770507c8fc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-85f004/sub-test-model-85f004\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-85f004/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:37:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e16979c-ae7b-4dc1-9eaa-84770507c8fc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-27T21:37:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2e16979c-ae7b-4dc1-9eaa-84770507c8fc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-27T21:37:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e16979c-ae7b-4dc1-9eaa-84770507c8fc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T21:37:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e16979c-ae7b-4dc1-9eaa-84770507c8fc","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-aa8f8d"} {"level":"info","ts":"2026-07-27T21:37:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e16979c-ae7b-4dc1-9eaa-84770507c8fc","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T21:37:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e16979c-ae7b-4dc1-9eaa-84770507c8fc","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T21:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2fd362a135f2d606b8bb8b768bfbaa536431b6cb830fe525129058e1b89bca99"} {"level":"info","ts":"2026-07-27T21:37:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/caaf795a72a77d65ade046d43d1447c7b84aef2815b86c6410a9bbb5ddbdbc63"} {"level":"info","ts":"2026-07-27T21:37:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b84a2a637fb3f9d1157d701c17284947147ab75b25880662afd0463cfda7412b"} {"level":"info","ts":"2026-07-27T21:37:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a8e7376ce68140ef182ce688af8c0aed26efcae473e365aa36003c7562080253"} {"level":"info","ts":"2026-07-27T21:37:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a042851af3bed8721b8b10791b0fece1d8fd35225387efdbb73fb1d131e1f750"} {"level":"info","ts":"2026-07-27T21:37:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/83e113db11e1d7769f7baefdf8f53f467afa6026a796d4e809c7bb7e597f4b50"} {"level":"info","ts":"2026-07-27T21:37:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/941d9a6228d1c2e2c0cc706c57ce800929cd96ad915288e9f787ccaf21ab5ae6"} {"level":"info","ts":"2026-07-27T21:37:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f010aab33c2e7dad29a5d0b680dd58da04578c6c5688205a2dafb6fdd421a5ac"} {"level":"info","ts":"2026-07-27T21:37:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/717c809ab63690c9b6d64a44a81082c70aca934dd794045364794d7dda78ad7c"} {"level":"info","ts":"2026-07-27T21:37:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cdf2c8d98571b940096aed06bec2cfd4017595027fded80cd2b0f12d12a4663e"} {"level":"info","ts":"2026-07-27T21:37:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f1ab5942392897eb6acfcbe34d1617f2f14e4794eed0129100da850801e0c30b"} {"level":"info","ts":"2026-07-27T21:37:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b06cd514f983bd8ab355f27e1220f7e60db97328ca3ec8853e997d43125e7dae"} {"level":"info","ts":"2026-07-27T21:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd"} {"level":"info","ts":"2026-07-27T21:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3cb04034098656afc56b0e52857e29cfd330dbec7b7848fb4e4661aea8f44b9d"} {"level":"info","ts":"2026-07-27T21:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec9ee1ed1185bfd7b1ddf227f2115f33af7477e259b75244489f57f1ffbd6381"} {"level":"info","ts":"2026-07-27T21:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/00859659394804fd37d93539f16101c0e2d110212a6815e32a712a6bd7c09b8d"} {"level":"info","ts":"2026-07-27T21:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b14ca91fdf3cc40c87c45c0d71cd0729f0063ed7938b8a70201357e18e3686fe"} {"level":"info","ts":"2026-07-27T21:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a0ddd035e9366e303fbbd631de50ec6043c590cdfc67a543175b89f7c6c1118b"} {"level":"info","ts":"2026-07-27T21:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/38977cfaa5be1ec5edb7895c9b1efb0ab74229e4101e469506a6b3072d77b6e5"} {"level":"info","ts":"2026-07-27T21:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac"} {"level":"info","ts":"2026-07-27T21:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d"} {"level":"info","ts":"2026-07-27T21:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1b1ee292f832f27632ff78649e713c3f93b24b387a09270389f5c896ab2ba725"} {"level":"info","ts":"2026-07-27T21:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4"} {"level":"info","ts":"2026-07-27T21:37:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/483896643cfebbff8b078f76de7898327468de8207778cb680ada2f2b32d5781"} {"level":"debug","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83e113db11e1d7769f7baefdf8f53f467afa6026a796d4e809c7bb7e597f4b50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:38:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:38:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83e113db11e1d7769f7baefdf8f53f467afa6026a796d4e809c7bb7e597f4b50"} {"level":"info","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83e113db11e1d7769f7baefdf8f53f467afa6026a796d4e809c7bb7e597f4b50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83e113db11e1d7769f7baefdf8f53f467afa6026a796d4e809c7bb7e597f4b50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83e113db11e1d7769f7baefdf8f53f467afa6026a796d4e809c7bb7e597f4b50","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83e113db11e1d7769f7baefdf8f53f467afa6026a796d4e809c7bb7e597f4b50"} {"level":"debug","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83e113db11e1d7769f7baefdf8f53f467afa6026a796d4e809c7bb7e597f4b50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:38:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:38:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83e113db11e1d7769f7baefdf8f53f467afa6026a796d4e809c7bb7e597f4b50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83e113db11e1d7769f7baefdf8f53f467afa6026a796d4e809c7bb7e597f4b50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83e113db11e1d7769f7baefdf8f53f467afa6026a796d4e809c7bb7e597f4b50","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83e113db11e1d7769f7baefdf8f53f467afa6026a796d4e809c7bb7e597f4b50"} {"level":"debug","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"287c623a6d59c280f101d2dea66aca11dc27eae782a9534c65c9e3ba236e7056","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:38:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:38:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/287c623a6d59c280f101d2dea66aca11dc27eae782a9534c65c9e3ba236e7056"} {"level":"info","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"287c623a6d59c280f101d2dea66aca11dc27eae782a9534c65c9e3ba236e7056","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"287c623a6d59c280f101d2dea66aca11dc27eae782a9534c65c9e3ba236e7056","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:38:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:38:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"287c623a6d59c280f101d2dea66aca11dc27eae782a9534c65c9e3ba236e7056","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"287c623a6d59c280f101d2dea66aca11dc27eae782a9534c65c9e3ba236e7056\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"287c623a6d59c280f101d2dea66aca11dc27eae782a9534c65c9e3ba236e7056","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/287c623a6d59c280f101d2dea66aca11dc27eae782a9534c65c9e3ba236e7056"} {"level":"debug","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"287c623a6d59c280f101d2dea66aca11dc27eae782a9534c65c9e3ba236e7056","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:38:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:38:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["287c623a6d59c280f101d2dea66aca11dc27eae782a9534c65c9e3ba236e7056"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"287c623a6d59c280f101d2dea66aca11dc27eae782a9534c65c9e3ba236e7056","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"287c623a6d59c280f101d2dea66aca11dc27eae782a9534c65c9e3ba236e7056","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:38:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:38:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"287c623a6d59c280f101d2dea66aca11dc27eae782a9534c65c9e3ba236e7056","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b001df80d9833009db4bba5917e6bef4149182d96911856a89e11ddeff551639","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:38:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:38:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/287c623a6d59c280f101d2dea66aca11dc27eae782a9534c65c9e3ba236e7056"} {"level":"info","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b001df80d9833009db4bba5917e6bef4149182d96911856a89e11ddeff551639","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"287c623a6d59c280f101d2dea66aca11dc27eae782a9534c65c9e3ba236e7056","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:38:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:38:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["287c623a6d59c280f101d2dea66aca11dc27eae782a9534c65c9e3ba236e7056"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b001df80d9833009db4bba5917e6bef4149182d96911856a89e11ddeff551639"} {"level":"info","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"287c623a6d59c280f101d2dea66aca11dc27eae782a9534c65c9e3ba236e7056","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b001df80d9833009db4bba5917e6bef4149182d96911856a89e11ddeff551639","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:38:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:38:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b001df80d9833009db4bba5917e6bef4149182d96911856a89e11ddeff551639"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/287c623a6d59c280f101d2dea66aca11dc27eae782a9534c65c9e3ba236e7056"} {"level":"info","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b001df80d9833009db4bba5917e6bef4149182d96911856a89e11ddeff551639","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"287c623a6d59c280f101d2dea66aca11dc27eae782a9534c65c9e3ba236e7056","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b001df80d9833009db4bba5917e6bef4149182d96911856a89e11ddeff551639","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:38:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:38:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b001df80d9833009db4bba5917e6bef4149182d96911856a89e11ddeff551639"} {"level":"info","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b001df80d9833009db4bba5917e6bef4149182d96911856a89e11ddeff551639","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b001df80d9833009db4bba5917e6bef4149182d96911856a89e11ddeff551639","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:38:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:38:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b001df80d9833009db4bba5917e6bef4149182d96911856a89e11ddeff551639"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/287c623a6d59c280f101d2dea66aca11dc27eae782a9534c65c9e3ba236e7056"} {"level":"info","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b001df80d9833009db4bba5917e6bef4149182d96911856a89e11ddeff551639","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b001df80d9833009db4bba5917e6bef4149182d96911856a89e11ddeff551639","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b001df80d9833009db4bba5917e6bef4149182d96911856a89e11ddeff551639","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:38:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:38:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b001df80d9833009db4bba5917e6bef4149182d96911856a89e11ddeff551639"} {"level":"info","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b001df80d9833009db4bba5917e6bef4149182d96911856a89e11ddeff551639","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"031f17ebd4e8e0d3314d9906623d965d8eaa207e68f84c7e445fc51bd8f65c07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:38:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:38:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/031f17ebd4e8e0d3314d9906623d965d8eaa207e68f84c7e445fc51bd8f65c07"} {"level":"info","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"031f17ebd4e8e0d3314d9906623d965d8eaa207e68f84c7e445fc51bd8f65c07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b001df80d9833009db4bba5917e6bef4149182d96911856a89e11ddeff551639","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"031f17ebd4e8e0d3314d9906623d965d8eaa207e68f84c7e445fc51bd8f65c07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:38:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:38:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["031f17ebd4e8e0d3314d9906623d965d8eaa207e68f84c7e445fc51bd8f65c07"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b001df80d9833009db4bba5917e6bef4149182d96911856a89e11ddeff551639"} {"level":"info","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"031f17ebd4e8e0d3314d9906623d965d8eaa207e68f84c7e445fc51bd8f65c07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"031f17ebd4e8e0d3314d9906623d965d8eaa207e68f84c7e445fc51bd8f65c07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b001df80d9833009db4bba5917e6bef4149182d96911856a89e11ddeff551639","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:38:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:38:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b001df80d9833009db4bba5917e6bef4149182d96911856a89e11ddeff551639"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b001df80d9833009db4bba5917e6bef4149182d96911856a89e11ddeff551639","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"031f17ebd4e8e0d3314d9906623d965d8eaa207e68f84c7e445fc51bd8f65c07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:38:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:38:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/031f17ebd4e8e0d3314d9906623d965d8eaa207e68f84c7e445fc51bd8f65c07"} {"level":"info","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"031f17ebd4e8e0d3314d9906623d965d8eaa207e68f84c7e445fc51bd8f65c07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b001df80d9833009db4bba5917e6bef4149182d96911856a89e11ddeff551639","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:38:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:38:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b001df80d9833009db4bba5917e6bef4149182d96911856a89e11ddeff551639"} {"level":"info","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b001df80d9833009db4bba5917e6bef4149182d96911856a89e11ddeff551639","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"031f17ebd4e8e0d3314d9906623d965d8eaa207e68f84c7e445fc51bd8f65c07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b001df80d9833009db4bba5917e6bef4149182d96911856a89e11ddeff551639","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:38:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:38:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b001df80d9833009db4bba5917e6bef4149182d96911856a89e11ddeff551639"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/031f17ebd4e8e0d3314d9906623d965d8eaa207e68f84c7e445fc51bd8f65c07"} {"level":"info","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b001df80d9833009db4bba5917e6bef4149182d96911856a89e11ddeff551639","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8586fb43859b9791871b3193a44f199a6082845ea2cd1110ad3cca9c8057cb47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:38:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:38:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8586fb43859b9791871b3193a44f199a6082845ea2cd1110ad3cca9c8057cb47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b001df80d9833009db4bba5917e6bef4149182d96911856a89e11ddeff551639","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:38:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:38:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b001df80d9833009db4bba5917e6bef4149182d96911856a89e11ddeff551639"} {"level":"info","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b001df80d9833009db4bba5917e6bef4149182d96911856a89e11ddeff551639","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"962bb5cf75519c42be2acd18a1f63f8d0aa47eed4eb717337db06a29f9935cb4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:38:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:38:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8586fb43859b9791871b3193a44f199a6082845ea2cd1110ad3cca9c8057cb47"} {"level":"info","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"962bb5cf75519c42be2acd18a1f63f8d0aa47eed4eb717337db06a29f9935cb4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"031f17ebd4e8e0d3314d9906623d965d8eaa207e68f84c7e445fc51bd8f65c07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:38:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:38:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["031f17ebd4e8e0d3314d9906623d965d8eaa207e68f84c7e445fc51bd8f65c07"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/962bb5cf75519c42be2acd18a1f63f8d0aa47eed4eb717337db06a29f9935cb4"} {"level":"info","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"031f17ebd4e8e0d3314d9906623d965d8eaa207e68f84c7e445fc51bd8f65c07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8586fb43859b9791871b3193a44f199a6082845ea2cd1110ad3cca9c8057cb47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:38:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:38:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8586fb43859b9791871b3193a44f199a6082845ea2cd1110ad3cca9c8057cb47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8586fb43859b9791871b3193a44f199a6082845ea2cd1110ad3cca9c8057cb47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b001df80d9833009db4bba5917e6bef4149182d96911856a89e11ddeff551639","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"962bb5cf75519c42be2acd18a1f63f8d0aa47eed4eb717337db06a29f9935cb4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:38:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:38:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["962bb5cf75519c42be2acd18a1f63f8d0aa47eed4eb717337db06a29f9935cb4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b001df80d9833009db4bba5917e6bef4149182d96911856a89e11ddeff551639"} {"level":"info","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"962bb5cf75519c42be2acd18a1f63f8d0aa47eed4eb717337db06a29f9935cb4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"031f17ebd4e8e0d3314d9906623d965d8eaa207e68f84c7e445fc51bd8f65c07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8586fb43859b9791871b3193a44f199a6082845ea2cd1110ad3cca9c8057cb47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b001df80d9833009db4bba5917e6bef4149182d96911856a89e11ddeff551639","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:38:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:38:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b001df80d9833009db4bba5917e6bef4149182d96911856a89e11ddeff551639"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/962bb5cf75519c42be2acd18a1f63f8d0aa47eed4eb717337db06a29f9935cb4"} {"level":"info","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b001df80d9833009db4bba5917e6bef4149182d96911856a89e11ddeff551639","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"962bb5cf75519c42be2acd18a1f63f8d0aa47eed4eb717337db06a29f9935cb4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b001df80d9833009db4bba5917e6bef4149182d96911856a89e11ddeff551639","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/031f17ebd4e8e0d3314d9906623d965d8eaa207e68f84c7e445fc51bd8f65c07"} {"level":"info","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8586fb43859b9791871b3193a44f199a6082845ea2cd1110ad3cca9c8057cb47"} {"level":"info","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/962bb5cf75519c42be2acd18a1f63f8d0aa47eed4eb717337db06a29f9935cb4"} {"level":"info","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b001df80d9833009db4bba5917e6bef4149182d96911856a89e11ddeff551639"} {"level":"debug","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caaf795a72a77d65ade046d43d1447c7b84aef2815b86c6410a9bbb5ddbdbc63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:38:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:38:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caaf795a72a77d65ade046d43d1447c7b84aef2815b86c6410a9bbb5ddbdbc63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caaf795a72a77d65ade046d43d1447c7b84aef2815b86c6410a9bbb5ddbdbc63","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caaf795a72a77d65ade046d43d1447c7b84aef2815b86c6410a9bbb5ddbdbc63"} {"level":"debug","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caaf795a72a77d65ade046d43d1447c7b84aef2815b86c6410a9bbb5ddbdbc63","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caaf795a72a77d65ade046d43d1447c7b84aef2815b86c6410a9bbb5ddbdbc63"} {"level":"debug","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caaf795a72a77d65ade046d43d1447c7b84aef2815b86c6410a9bbb5ddbdbc63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:38:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:38:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["caaf795a72a77d65ade046d43d1447c7b84aef2815b86c6410a9bbb5ddbdbc63"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caaf795a72a77d65ade046d43d1447c7b84aef2815b86c6410a9bbb5ddbdbc63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caaf795a72a77d65ade046d43d1447c7b84aef2815b86c6410a9bbb5ddbdbc63","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caaf795a72a77d65ade046d43d1447c7b84aef2815b86c6410a9bbb5ddbdbc63"} {"level":"debug","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1ab5942392897eb6acfcbe34d1617f2f14e4794eed0129100da850801e0c30b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:38:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:38:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1ab5942392897eb6acfcbe34d1617f2f14e4794eed0129100da850801e0c30b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1ab5942392897eb6acfcbe34d1617f2f14e4794eed0129100da850801e0c30b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1ab5942392897eb6acfcbe34d1617f2f14e4794eed0129100da850801e0c30b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1ab5942392897eb6acfcbe34d1617f2f14e4794eed0129100da850801e0c30b"} {"level":"debug","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1ab5942392897eb6acfcbe34d1617f2f14e4794eed0129100da850801e0c30b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1ab5942392897eb6acfcbe34d1617f2f14e4794eed0129100da850801e0c30b"} {"level":"debug","ts":"2026-07-27T21:38:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1ab5942392897eb6acfcbe34d1617f2f14e4794eed0129100da850801e0c30b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:38:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:38:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1ab5942392897eb6acfcbe34d1617f2f14e4794eed0129100da850801e0c30b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1ab5942392897eb6acfcbe34d1617f2f14e4794eed0129100da850801e0c30b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"339d7b6e49b67ccbdcb001c63e34fc2bfa34d163c1586a3d0dc3c4ca2dd63c2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:38:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:38:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"339d7b6e49b67ccbdcb001c63e34fc2bfa34d163c1586a3d0dc3c4ca2dd63c2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1ab5942392897eb6acfcbe34d1617f2f14e4794eed0129100da850801e0c30b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c19267a895884d6614bd4c9a3aa4387ab45279ea15600d47e0f55cfe9ffbbc1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:38:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:38:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/339d7b6e49b67ccbdcb001c63e34fc2bfa34d163c1586a3d0dc3c4ca2dd63c2b"} {"level":"info","ts":"2026-07-27T21:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c19267a895884d6614bd4c9a3aa4387ab45279ea15600d47e0f55cfe9ffbbc1e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"339d7b6e49b67ccbdcb001c63e34fc2bfa34d163c1586a3d0dc3c4ca2dd63c2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:38:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:38:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["339d7b6e49b67ccbdcb001c63e34fc2bfa34d163c1586a3d0dc3c4ca2dd63c2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1ab5942392897eb6acfcbe34d1617f2f14e4794eed0129100da850801e0c30b"} {"level":"info","ts":"2026-07-27T21:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"339d7b6e49b67ccbdcb001c63e34fc2bfa34d163c1586a3d0dc3c4ca2dd63c2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f24bb28e67e35540a7ba1c36be3bc2bb89a07fb42589fc05899bec9965a21d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:38:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:38:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c19267a895884d6614bd4c9a3aa4387ab45279ea15600d47e0f55cfe9ffbbc1e"} {"level":"info","ts":"2026-07-27T21:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f24bb28e67e35540a7ba1c36be3bc2bb89a07fb42589fc05899bec9965a21d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c19267a895884d6614bd4c9a3aa4387ab45279ea15600d47e0f55cfe9ffbbc1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:38:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:38:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c19267a895884d6614bd4c9a3aa4387ab45279ea15600d47e0f55cfe9ffbbc1e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c19267a895884d6614bd4c9a3aa4387ab45279ea15600d47e0f55cfe9ffbbc1e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdf2c8d98571b940096aed06bec2cfd4017595027fded80cd2b0f12d12a4663e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:38:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:38:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/339d7b6e49b67ccbdcb001c63e34fc2bfa34d163c1586a3d0dc3c4ca2dd63c2b"} {"level":"info","ts":"2026-07-27T21:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdf2c8d98571b940096aed06bec2cfd4017595027fded80cd2b0f12d12a4663e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"339d7b6e49b67ccbdcb001c63e34fc2bfa34d163c1586a3d0dc3c4ca2dd63c2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f24bb28e67e35540a7ba1c36be3bc2bb89a07fb42589fc05899bec9965a21d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:38:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:38:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f24bb28e67e35540a7ba1c36be3bc2bb89a07fb42589fc05899bec9965a21d5"} {"level":"info","ts":"2026-07-27T21:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f24bb28e67e35540a7ba1c36be3bc2bb89a07fb42589fc05899bec9965a21d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c19267a895884d6614bd4c9a3aa4387ab45279ea15600d47e0f55cfe9ffbbc1e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdf2c8d98571b940096aed06bec2cfd4017595027fded80cd2b0f12d12a4663e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:38:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:38:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdf2c8d98571b940096aed06bec2cfd4017595027fded80cd2b0f12d12a4663e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f24bb28e67e35540a7ba1c36be3bc2bb89a07fb42589fc05899bec9965a21d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:38:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:38:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f24bb28e67e35540a7ba1c36be3bc2bb89a07fb42589fc05899bec9965a21d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdf2c8d98571b940096aed06bec2cfd4017595027fded80cd2b0f12d12a4663e"} {"level":"info","ts":"2026-07-27T21:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f24bb28e67e35540a7ba1c36be3bc2bb89a07fb42589fc05899bec9965a21d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdf2c8d98571b940096aed06bec2cfd4017595027fded80cd2b0f12d12a4663e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:38:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:38:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cdf2c8d98571b940096aed06bec2cfd4017595027fded80cd2b0f12d12a4663e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c19267a895884d6614bd4c9a3aa4387ab45279ea15600d47e0f55cfe9ffbbc1e"} {"level":"info","ts":"2026-07-27T21:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdf2c8d98571b940096aed06bec2cfd4017595027fded80cd2b0f12d12a4663e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f24bb28e67e35540a7ba1c36be3bc2bb89a07fb42589fc05899bec9965a21d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:38:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:38:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f24bb28e67e35540a7ba1c36be3bc2bb89a07fb42589fc05899bec9965a21d5"} {"level":"info","ts":"2026-07-27T21:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f24bb28e67e35540a7ba1c36be3bc2bb89a07fb42589fc05899bec9965a21d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdf2c8d98571b940096aed06bec2cfd4017595027fded80cd2b0f12d12a4663e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:38:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:38:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdf2c8d98571b940096aed06bec2cfd4017595027fded80cd2b0f12d12a4663e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f24bb28e67e35540a7ba1c36be3bc2bb89a07fb42589fc05899bec9965a21d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:38:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:38:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f24bb28e67e35540a7ba1c36be3bc2bb89a07fb42589fc05899bec9965a21d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdf2c8d98571b940096aed06bec2cfd4017595027fded80cd2b0f12d12a4663e"} {"level":"info","ts":"2026-07-27T21:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f24bb28e67e35540a7ba1c36be3bc2bb89a07fb42589fc05899bec9965a21d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdf2c8d98571b940096aed06bec2cfd4017595027fded80cd2b0f12d12a4663e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:38:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:38:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cdf2c8d98571b940096aed06bec2cfd4017595027fded80cd2b0f12d12a4663e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f24bb28e67e35540a7ba1c36be3bc2bb89a07fb42589fc05899bec9965a21d5"} {"level":"info","ts":"2026-07-27T21:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdf2c8d98571b940096aed06bec2cfd4017595027fded80cd2b0f12d12a4663e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f24bb28e67e35540a7ba1c36be3bc2bb89a07fb42589fc05899bec9965a21d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdf2c8d98571b940096aed06bec2cfd4017595027fded80cd2b0f12d12a4663e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:38:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:38:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdf2c8d98571b940096aed06bec2cfd4017595027fded80cd2b0f12d12a4663e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdf2c8d98571b940096aed06bec2cfd4017595027fded80cd2b0f12d12a4663e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdf2c8d98571b940096aed06bec2cfd4017595027fded80cd2b0f12d12a4663e"} {"level":"debug","ts":"2026-07-27T21:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdf2c8d98571b940096aed06bec2cfd4017595027fded80cd2b0f12d12a4663e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:38:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:38:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cdf2c8d98571b940096aed06bec2cfd4017595027fded80cd2b0f12d12a4663e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdf2c8d98571b940096aed06bec2cfd4017595027fded80cd2b0f12d12a4663e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdf2c8d98571b940096aed06bec2cfd4017595027fded80cd2b0f12d12a4663e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f24bb28e67e35540a7ba1c36be3bc2bb89a07fb42589fc05899bec9965a21d5"} {"level":"info","ts":"2026-07-27T21:38:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdf2c8d98571b940096aed06bec2cfd4017595027fded80cd2b0f12d12a4663e"} {"level":"debug","ts":"2026-07-27T21:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:38:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:38:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51"} {"level":"debug","ts":"2026-07-27T21:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51"} {"level":"debug","ts":"2026-07-27T21:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:38:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:38:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51"} {"level":"debug","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36146c37313c8d0f944da45c61f14b78c3909e2dd5b3e43445f08a4e1f2c18e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:38:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:38:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36146c37313c8d0f944da45c61f14b78c3909e2dd5b3e43445f08a4e1f2c18e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36146c37313c8d0f944da45c61f14b78c3909e2dd5b3e43445f08a4e1f2c18e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:38:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:38:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36146c37313c8d0f944da45c61f14b78c3909e2dd5b3e43445f08a4e1f2c18e3"} {"level":"info","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36146c37313c8d0f944da45c61f14b78c3909e2dd5b3e43445f08a4e1f2c18e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36146c37313c8d0f944da45c61f14b78c3909e2dd5b3e43445f08a4e1f2c18e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:38:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:38:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"36146c37313c8d0f944da45c61f14b78c3909e2dd5b3e43445f08a4e1f2c18e3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"36146c37313c8d0f944da45c61f14b78c3909e2dd5b3e43445f08a4e1f2c18e3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36146c37313c8d0f944da45c61f14b78c3909e2dd5b3e43445f08a4e1f2c18e3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36146c37313c8d0f944da45c61f14b78c3909e2dd5b3e43445f08a4e1f2c18e3"} {"level":"debug","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36146c37313c8d0f944da45c61f14b78c3909e2dd5b3e43445f08a4e1f2c18e3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36146c37313c8d0f944da45c61f14b78c3909e2dd5b3e43445f08a4e1f2c18e3"} {"level":"debug","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc0b14ef275a1f938b89f85b9dea2e23e84f1888f6f91832fd8652e9a784b9c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:38:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:38:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc0b14ef275a1f938b89f85b9dea2e23e84f1888f6f91832fd8652e9a784b9c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc0b14ef275a1f938b89f85b9dea2e23e84f1888f6f91832fd8652e9a784b9c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36146c37313c8d0f944da45c61f14b78c3909e2dd5b3e43445f08a4e1f2c18e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:38:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:38:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36146c37313c8d0f944da45c61f14b78c3909e2dd5b3e43445f08a4e1f2c18e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc0b14ef275a1f938b89f85b9dea2e23e84f1888f6f91832fd8652e9a784b9c3"} {"level":"info","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36146c37313c8d0f944da45c61f14b78c3909e2dd5b3e43445f08a4e1f2c18e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc0b14ef275a1f938b89f85b9dea2e23e84f1888f6f91832fd8652e9a784b9c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36146c37313c8d0f944da45c61f14b78c3909e2dd5b3e43445f08a4e1f2c18e3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc0b14ef275a1f938b89f85b9dea2e23e84f1888f6f91832fd8652e9a784b9c3"} {"level":"debug","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc0b14ef275a1f938b89f85b9dea2e23e84f1888f6f91832fd8652e9a784b9c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:38:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:38:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc0b14ef275a1f938b89f85b9dea2e23e84f1888f6f91832fd8652e9a784b9c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36146c37313c8d0f944da45c61f14b78c3909e2dd5b3e43445f08a4e1f2c18e3"} {"level":"info","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc0b14ef275a1f938b89f85b9dea2e23e84f1888f6f91832fd8652e9a784b9c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc0b14ef275a1f938b89f85b9dea2e23e84f1888f6f91832fd8652e9a784b9c3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc0b14ef275a1f938b89f85b9dea2e23e84f1888f6f91832fd8652e9a784b9c3"} {"level":"debug","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"199ca4e1d985d9bcbb693fa72943eb258a4d44684555fc85c9e61f52907a932f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:38:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:38:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"199ca4e1d985d9bcbb693fa72943eb258a4d44684555fc85c9e61f52907a932f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"199ca4e1d985d9bcbb693fa72943eb258a4d44684555fc85c9e61f52907a932f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"199ca4e1d985d9bcbb693fa72943eb258a4d44684555fc85c9e61f52907a932f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/199ca4e1d985d9bcbb693fa72943eb258a4d44684555fc85c9e61f52907a932f"} {"level":"debug","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"199ca4e1d985d9bcbb693fa72943eb258a4d44684555fc85c9e61f52907a932f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/199ca4e1d985d9bcbb693fa72943eb258a4d44684555fc85c9e61f52907a932f"} {"level":"debug","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"199ca4e1d985d9bcbb693fa72943eb258a4d44684555fc85c9e61f52907a932f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:38:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:38:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["199ca4e1d985d9bcbb693fa72943eb258a4d44684555fc85c9e61f52907a932f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"199ca4e1d985d9bcbb693fa72943eb258a4d44684555fc85c9e61f52907a932f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:38:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:38:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"199ca4e1d985d9bcbb693fa72943eb258a4d44684555fc85c9e61f52907a932f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d"} {"level":"debug","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:38:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:38:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/199ca4e1d985d9bcbb693fa72943eb258a4d44684555fc85c9e61f52907a932f"} {"level":"info","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d"} {"level":"debug","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:38:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:38:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4"} {"level":"info","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:38:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:38:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:38:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:38:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4"} {"level":"info","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:38:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:38:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4"} {"level":"debug","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9009a84f95de6aec6b5d635a781c6c80493b9e70c07979eb1f1a39f8dc37ba1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:38:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:38:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9009a84f95de6aec6b5d635a781c6c80493b9e70c07979eb1f1a39f8dc37ba1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9009a84f95de6aec6b5d635a781c6c80493b9e70c07979eb1f1a39f8dc37ba1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4"} {"level":"debug","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9009a84f95de6aec6b5d635a781c6c80493b9e70c07979eb1f1a39f8dc37ba1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:38:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:38:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9009a84f95de6aec6b5d635a781c6c80493b9e70c07979eb1f1a39f8dc37ba1"} {"level":"info","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9009a84f95de6aec6b5d635a781c6c80493b9e70c07979eb1f1a39f8dc37ba1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9009a84f95de6aec6b5d635a781c6c80493b9e70c07979eb1f1a39f8dc37ba1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9009a84f95de6aec6b5d635a781c6c80493b9e70c07979eb1f1a39f8dc37ba1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9009a84f95de6aec6b5d635a781c6c80493b9e70c07979eb1f1a39f8dc37ba1"} {"level":"debug","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:38:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:38:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac"} {"level":"info","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:38:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:38:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:38:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:38:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac"} {"level":"info","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:38:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:38:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd"} {"level":"info","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:38:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:38:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d220eb9938a15e3eb92d99842bac7ecf1040736baa3bde181403fc6ddc1c3b89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:38:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:38:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4"} {"level":"info","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d220eb9938a15e3eb92d99842bac7ecf1040736baa3bde181403fc6ddc1c3b89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:38:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:38:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d220eb9938a15e3eb92d99842bac7ecf1040736baa3bde181403fc6ddc1c3b89"} {"level":"info","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb0bb93224ce828e3066f0bff3b69d393dfd5533b564b6435e3a47c8db68baf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:38:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:38:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac"} {"level":"info","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb0bb93224ce828e3066f0bff3b69d393dfd5533b564b6435e3a47c8db68baf0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9009a84f95de6aec6b5d635a781c6c80493b9e70c07979eb1f1a39f8dc37ba1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:38:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:38:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9009a84f95de6aec6b5d635a781c6c80493b9e70c07979eb1f1a39f8dc37ba1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb0bb93224ce828e3066f0bff3b69d393dfd5533b564b6435e3a47c8db68baf0"} {"level":"info","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9009a84f95de6aec6b5d635a781c6c80493b9e70c07979eb1f1a39f8dc37ba1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37266b963f774930c89dbda73782c412819f990c8ed661873f43424110ad2bfe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:38:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:38:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37266b963f774930c89dbda73782c412819f990c8ed661873f43424110ad2bfe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:38:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:38:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd"} {"level":"info","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d220eb9938a15e3eb92d99842bac7ecf1040736baa3bde181403fc6ddc1c3b89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:38:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:38:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d220eb9938a15e3eb92d99842bac7ecf1040736baa3bde181403fc6ddc1c3b89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37266b963f774930c89dbda73782c412819f990c8ed661873f43424110ad2bfe"} {"level":"info","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d220eb9938a15e3eb92d99842bac7ecf1040736baa3bde181403fc6ddc1c3b89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb0bb93224ce828e3066f0bff3b69d393dfd5533b564b6435e3a47c8db68baf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:38:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:38:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb0bb93224ce828e3066f0bff3b69d393dfd5533b564b6435e3a47c8db68baf0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4"} {"level":"info","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb0bb93224ce828e3066f0bff3b69d393dfd5533b564b6435e3a47c8db68baf0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9009a84f95de6aec6b5d635a781c6c80493b9e70c07979eb1f1a39f8dc37ba1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:38:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:38:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37266b963f774930c89dbda73782c412819f990c8ed661873f43424110ad2bfe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:38:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:38:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37266b963f774930c89dbda73782c412819f990c8ed661873f43424110ad2bfe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d220eb9938a15e3eb92d99842bac7ecf1040736baa3bde181403fc6ddc1c3b89"} {"level":"info","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37266b963f774930c89dbda73782c412819f990c8ed661873f43424110ad2bfe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d220eb9938a15e3eb92d99842bac7ecf1040736baa3bde181403fc6ddc1c3b89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb0bb93224ce828e3066f0bff3b69d393dfd5533b564b6435e3a47c8db68baf0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37266b963f774930c89dbda73782c412819f990c8ed661873f43424110ad2bfe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac"} {"level":"info","ts":"2026-07-27T21:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb0bb93224ce828e3066f0bff3b69d393dfd5533b564b6435e3a47c8db68baf0"} {"level":"info","ts":"2026-07-27T21:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9009a84f95de6aec6b5d635a781c6c80493b9e70c07979eb1f1a39f8dc37ba1"} {"level":"info","ts":"2026-07-27T21:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd"} {"level":"info","ts":"2026-07-27T21:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37266b963f774930c89dbda73782c412819f990c8ed661873f43424110ad2bfe"} {"level":"info","ts":"2026-07-27T21:38:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a21f1e8f-0df2-4991-9181-8f11026585ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:43638","PortSpecifier":{"PortValue":43638}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a21f1e8f-0df2-4991-9181-8f11026585ec","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c910ce.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T21:38:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a21f1e8f-0df2-4991-9181-8f11026585ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:43638","PortSpecifier":{"PortValue":43638}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785188328,"nanos":277922626},"http":{"id":"a21f1e8f-0df2-4991-9181-8f11026585ec","method":"POST","headers":{":authority":"e2e-shared-a-c910ce.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T21:38:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a21f1e8f-0df2-4991-9181-8f11026585ec","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T21:38:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a21f1e8f-0df2-4991-9181-8f11026585ec","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"cbd7f247-ea90-43d8-8ce3-e28a2a121794","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6ac1e77f-7df8-4dea-ab0c-bf8d022a6519"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa88232987eb"]}} {"level":"debug","ts":"2026-07-27T21:38:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a21f1e8f-0df2-4991-9181-8f11026585ec","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa88232987eb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6ac1e77f-7df8-4dea-ab0c-bf8d022a6519"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"cbd7f247-ea90-43d8-8ce3-e28a2a121794","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f1ab5942392897eb6acfcbe34d1617f2f14e4794eed0129100da850801e0c30b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c910ce.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T21:38:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a21f1e8f-0df2-4991-9181-8f11026585ec","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:38:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a21f1e8f-0df2-4991-9181-8f11026585ec","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:38:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a21f1e8f-0df2-4991-9181-8f11026585ec","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c910ce/rate-test-model-c910ce\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c910ce/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:38:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a21f1e8f-0df2-4991-9181-8f11026585ec","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T21:38:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a21f1e8f-0df2-4991-9181-8f11026585ec","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T21:38:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a21f1e8f-0df2-4991-9181-8f11026585ec","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-27T21:38:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a21f1e8f-0df2-4991-9181-8f11026585ec","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T21:38:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a21f1e8f-0df2-4991-9181-8f11026585ec","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T21:38:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"75df1de5-9295-4a0f-bb0d-7749d6ac45b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:37498","PortSpecifier":{"PortValue":37498}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"75df1de5-9295-4a0f-bb0d-7749d6ac45b9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-85f004.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T21:38:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"75df1de5-9295-4a0f-bb0d-7749d6ac45b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:37498","PortSpecifier":{"PortValue":37498}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785188328,"nanos":327482311},"http":{"id":"75df1de5-9295-4a0f-bb0d-7749d6ac45b9","method":"POST","headers":{":authority":"e2e-shared-b-85f004.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T21:38:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"75df1de5-9295-4a0f-bb0d-7749d6ac45b9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T21:38:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"75df1de5-9295-4a0f-bb0d-7749d6ac45b9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"cbd7f247-ea90-43d8-8ce3-e28a2a121794","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6ac1e77f-7df8-4dea-ab0c-bf8d022a6519"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa88232987eb"]}} {"level":"debug","ts":"2026-07-27T21:38:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"75df1de5-9295-4a0f-bb0d-7749d6ac45b9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa88232987eb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6ac1e77f-7df8-4dea-ab0c-bf8d022a6519"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"cbd7f247-ea90-43d8-8ce3-e28a2a121794","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-85f004.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T21:38:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75df1de5-9295-4a0f-bb0d-7749d6ac45b9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:38:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75df1de5-9295-4a0f-bb0d-7749d6ac45b9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:38:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75df1de5-9295-4a0f-bb0d-7749d6ac45b9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-85f004/rate-test-model-85f004\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-85f004/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:38:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"75df1de5-9295-4a0f-bb0d-7749d6ac45b9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T21:38:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75df1de5-9295-4a0f-bb0d-7749d6ac45b9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-27T21:38:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75df1de5-9295-4a0f-bb0d-7749d6ac45b9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-27T21:38:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"75df1de5-9295-4a0f-bb0d-7749d6ac45b9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T21:38:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"75df1de5-9295-4a0f-bb0d-7749d6ac45b9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T21:38:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dd7dcb49-5436-456b-a9ce-68746431161a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:43644","PortSpecifier":{"PortValue":43644}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dd7dcb49-5436-456b-a9ce-68746431161a","method":"POST","path":"/ai-tenant-e2e-shared-a-c910ce/rate-test-model-c910ce/v1/completions","host":"e2e-shared-a-c910ce.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T21:38:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dd7dcb49-5436-456b-a9ce-68746431161a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:43644","PortSpecifier":{"PortValue":43644}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785188328,"nanos":368187045},"http":{"id":"dd7dcb49-5436-456b-a9ce-68746431161a","method":"POST","headers":{":authority":"e2e-shared-a-c910ce.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c910ce/rate-test-model-c910ce/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T21:38:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dd7dcb49-5436-456b-a9ce-68746431161a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-D1Pt1ifdRjDv3hoj_hO4lbjezF7Pm6JL2Gtl8cE3qJSDcKV3mkTYglcFC8GW"} {"level":"debug","ts":"2026-07-27T21:38:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dd7dcb49-5436-456b-a9ce-68746431161a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c910ce.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-D1Pt1ifdRjDv3hoj_hO4lbjezF7Pm6JL2Gtl8cE3qJSDcKV3mkTYglcFC8GW\"}"} {"level":"debug","ts":"2026-07-27T21:38:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dd7dcb49-5436-456b-a9ce-68746431161a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c910ce.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5a5df83a-f3e6-4398-960c-273297e5180c","keyName":"e2e-rate-a-8421d8","subscription":"e2e-rate-iso-a-8421d8","tenant":"e2e-shared-a-c910ce","userId":"5a5df83a-f3e6-4398-960c-273297e5180c","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-27T21:38:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dd7dcb49-5436-456b-a9ce-68746431161a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c910ce.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c910ce/rate-test-model-c910ce\",\"requestedSubscription\":\"e2e-rate-iso-a-8421d8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-27T21:38:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dd7dcb49-5436-456b-a9ce-68746431161a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c910ce.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-c910ce/models/facebook/opt-125m","name":"rate-test-model-c910ce","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8421d8","namespace":"ai-tenant-e2e-shared-a-c910ce","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-c910ce/rate-test-model-c910ce"}} {"level":"debug","ts":"2026-07-27T21:38:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dd7dcb49-5436-456b-a9ce-68746431161a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T21:38:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd7dcb49-5436-456b-a9ce-68746431161a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:38:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd7dcb49-5436-456b-a9ce-68746431161a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:38:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd7dcb49-5436-456b-a9ce-68746431161a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c910ce/rate-test-model-c910ce\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c910ce/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:38:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd7dcb49-5436-456b-a9ce-68746431161a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:38:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd7dcb49-5436-456b-a9ce-68746431161a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T21:38:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd7dcb49-5436-456b-a9ce-68746431161a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8421d8"} {"level":"debug","ts":"2026-07-27T21:38:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd7dcb49-5436-456b-a9ce-68746431161a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-27T21:38:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd7dcb49-5436-456b-a9ce-68746431161a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5a5df83a-f3e6-4398-960c-273297e5180c","keyName":"e2e-rate-a-8421d8","selected_subscription":"e2e-rate-iso-a-8421d8","selected_subscription_key":"ai-tenant-e2e-shared-a-c910ce/e2e-rate-iso-a-8421d8@ai-tenant-e2e-shared-a-c910ce/rate-test-model-c910ce","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-c910ce/models/facebook/opt-125m","name":"rate-test-model-c910ce","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8421d8","namespace":"ai-tenant-e2e-shared-a-c910ce","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-c910ce/rate-test-model-c910ce"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-27T21:38:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dd7dcb49-5436-456b-a9ce-68746431161a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T21:38:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dd7dcb49-5436-456b-a9ce-68746431161a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T21:38:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"79ce9eb0-f7d9-4d6f-bb14-ad05e20e5256","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:43658","PortSpecifier":{"PortValue":43658}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"79ce9eb0-f7d9-4d6f-bb14-ad05e20e5256","method":"POST","path":"/ai-tenant-e2e-shared-a-c910ce/rate-test-model-c910ce/v1/completions","host":"e2e-shared-a-c910ce.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T21:38:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"79ce9eb0-f7d9-4d6f-bb14-ad05e20e5256","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:43658","PortSpecifier":{"PortValue":43658}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785188329,"nanos":452536318},"http":{"id":"79ce9eb0-f7d9-4d6f-bb14-ad05e20e5256","method":"POST","headers":{":authority":"e2e-shared-a-c910ce.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c910ce/rate-test-model-c910ce/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T21:38:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"79ce9eb0-f7d9-4d6f-bb14-ad05e20e5256","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-D1Pt1ifdRjDv3hoj_hO4lbjezF7Pm6JL2Gtl8cE3qJSDcKV3mkTYglcFC8GW"} {"level":"debug","ts":"2026-07-27T21:38:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"79ce9eb0-f7d9-4d6f-bb14-ad05e20e5256","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c910ce.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-D1Pt1ifdRjDv3hoj_hO4lbjezF7Pm6JL2Gtl8cE3qJSDcKV3mkTYglcFC8GW\"}"} {"level":"debug","ts":"2026-07-27T21:38:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"79ce9eb0-f7d9-4d6f-bb14-ad05e20e5256","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c910ce.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5a5df83a-f3e6-4398-960c-273297e5180c","keyName":"e2e-rate-a-8421d8","subscription":"e2e-rate-iso-a-8421d8","tenant":"e2e-shared-a-c910ce","userId":"5a5df83a-f3e6-4398-960c-273297e5180c","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-27T21:38:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"79ce9eb0-f7d9-4d6f-bb14-ad05e20e5256","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c910ce.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c910ce/rate-test-model-c910ce\",\"requestedSubscription\":\"e2e-rate-iso-a-8421d8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-27T21:38:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"79ce9eb0-f7d9-4d6f-bb14-ad05e20e5256","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c910ce.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-c910ce/models/facebook/opt-125m","name":"rate-test-model-c910ce","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8421d8","namespace":"ai-tenant-e2e-shared-a-c910ce","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-c910ce/rate-test-model-c910ce"}} {"level":"debug","ts":"2026-07-27T21:38:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"79ce9eb0-f7d9-4d6f-bb14-ad05e20e5256","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T21:38:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79ce9eb0-f7d9-4d6f-bb14-ad05e20e5256","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:38:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79ce9eb0-f7d9-4d6f-bb14-ad05e20e5256","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:38:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79ce9eb0-f7d9-4d6f-bb14-ad05e20e5256","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c910ce/rate-test-model-c910ce\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c910ce/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:38:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79ce9eb0-f7d9-4d6f-bb14-ad05e20e5256","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:38:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79ce9eb0-f7d9-4d6f-bb14-ad05e20e5256","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T21:38:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79ce9eb0-f7d9-4d6f-bb14-ad05e20e5256","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8421d8"} {"level":"debug","ts":"2026-07-27T21:38:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79ce9eb0-f7d9-4d6f-bb14-ad05e20e5256","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-27T21:38:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79ce9eb0-f7d9-4d6f-bb14-ad05e20e5256","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5a5df83a-f3e6-4398-960c-273297e5180c","keyName":"e2e-rate-a-8421d8","selected_subscription":"e2e-rate-iso-a-8421d8","selected_subscription_key":"ai-tenant-e2e-shared-a-c910ce/e2e-rate-iso-a-8421d8@ai-tenant-e2e-shared-a-c910ce/rate-test-model-c910ce","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-c910ce/models/facebook/opt-125m","name":"rate-test-model-c910ce","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8421d8","namespace":"ai-tenant-e2e-shared-a-c910ce","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-c910ce/rate-test-model-c910ce"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-27T21:38:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"79ce9eb0-f7d9-4d6f-bb14-ad05e20e5256","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T21:38:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"79ce9eb0-f7d9-4d6f-bb14-ad05e20e5256","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T21:38:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2897c0ee-9ee0-4932-a1d7-d161b01ef009","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:49972","PortSpecifier":{"PortValue":49972}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2897c0ee-9ee0-4932-a1d7-d161b01ef009","method":"POST","path":"/ai-tenant-e2e-shared-a-c910ce/rate-test-model-c910ce/v1/completions","host":"e2e-shared-a-c910ce.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T21:38:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2897c0ee-9ee0-4932-a1d7-d161b01ef009","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:49972","PortSpecifier":{"PortValue":49972}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785188330,"nanos":496118108},"http":{"id":"2897c0ee-9ee0-4932-a1d7-d161b01ef009","method":"POST","headers":{":authority":"e2e-shared-a-c910ce.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c910ce/rate-test-model-c910ce/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T21:38:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2897c0ee-9ee0-4932-a1d7-d161b01ef009","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-D1Pt1ifdRjDv3hoj_hO4lbjezF7Pm6JL2Gtl8cE3qJSDcKV3mkTYglcFC8GW"} {"level":"debug","ts":"2026-07-27T21:38:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2897c0ee-9ee0-4932-a1d7-d161b01ef009","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c910ce.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-D1Pt1ifdRjDv3hoj_hO4lbjezF7Pm6JL2Gtl8cE3qJSDcKV3mkTYglcFC8GW\"}"} {"level":"debug","ts":"2026-07-27T21:38:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2897c0ee-9ee0-4932-a1d7-d161b01ef009","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c910ce.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5a5df83a-f3e6-4398-960c-273297e5180c","keyName":"e2e-rate-a-8421d8","subscription":"e2e-rate-iso-a-8421d8","tenant":"e2e-shared-a-c910ce","userId":"5a5df83a-f3e6-4398-960c-273297e5180c","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-27T21:38:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2897c0ee-9ee0-4932-a1d7-d161b01ef009","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c910ce.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c910ce/rate-test-model-c910ce\",\"requestedSubscription\":\"e2e-rate-iso-a-8421d8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-27T21:38:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2897c0ee-9ee0-4932-a1d7-d161b01ef009","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c910ce.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-c910ce/models/facebook/opt-125m","name":"rate-test-model-c910ce","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8421d8","namespace":"ai-tenant-e2e-shared-a-c910ce","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-c910ce/rate-test-model-c910ce"}} {"level":"debug","ts":"2026-07-27T21:38:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2897c0ee-9ee0-4932-a1d7-d161b01ef009","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T21:38:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2897c0ee-9ee0-4932-a1d7-d161b01ef009","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:38:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2897c0ee-9ee0-4932-a1d7-d161b01ef009","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:38:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2897c0ee-9ee0-4932-a1d7-d161b01ef009","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:38:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2897c0ee-9ee0-4932-a1d7-d161b01ef009","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c910ce/rate-test-model-c910ce\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c910ce/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:38:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2897c0ee-9ee0-4932-a1d7-d161b01ef009","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T21:38:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2897c0ee-9ee0-4932-a1d7-d161b01ef009","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-27T21:38:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2897c0ee-9ee0-4932-a1d7-d161b01ef009","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8421d8"} {"level":"debug","ts":"2026-07-27T21:38:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2897c0ee-9ee0-4932-a1d7-d161b01ef009","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5a5df83a-f3e6-4398-960c-273297e5180c","keyName":"e2e-rate-a-8421d8","selected_subscription":"e2e-rate-iso-a-8421d8","selected_subscription_key":"ai-tenant-e2e-shared-a-c910ce/e2e-rate-iso-a-8421d8@ai-tenant-e2e-shared-a-c910ce/rate-test-model-c910ce","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-c910ce/models/facebook/opt-125m","name":"rate-test-model-c910ce","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8421d8","namespace":"ai-tenant-e2e-shared-a-c910ce","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-c910ce/rate-test-model-c910ce"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-27T21:38:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2897c0ee-9ee0-4932-a1d7-d161b01ef009","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T21:38:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2897c0ee-9ee0-4932-a1d7-d161b01ef009","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T21:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/199ca4e1d985d9bcbb693fa72943eb258a4d44684555fc85c9e61f52907a932f"} {"level":"info","ts":"2026-07-27T21:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd"} {"level":"info","ts":"2026-07-27T21:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cb0bb93224ce828e3066f0bff3b69d393dfd5533b564b6435e3a47c8db68baf0"} {"level":"info","ts":"2026-07-27T21:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d220eb9938a15e3eb92d99842bac7ecf1040736baa3bde181403fc6ddc1c3b89"} {"level":"info","ts":"2026-07-27T21:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/37266b963f774930c89dbda73782c412819f990c8ed661873f43424110ad2bfe"} {"level":"info","ts":"2026-07-27T21:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d"} {"level":"info","ts":"2026-07-27T21:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4"} {"level":"info","ts":"2026-07-27T21:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d9009a84f95de6aec6b5d635a781c6c80493b9e70c07979eb1f1a39f8dc37ba1"} {"level":"info","ts":"2026-07-27T21:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bc0b14ef275a1f938b89f85b9dea2e23e84f1888f6f91832fd8652e9a784b9c3"} {"level":"info","ts":"2026-07-27T21:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac"} {"level":"info","ts":"2026-07-27T21:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51"} {"level":"info","ts":"2026-07-27T21:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/36146c37313c8d0f944da45c61f14b78c3909e2dd5b3e43445f08a4e1f2c18e3"} {"level":"debug","ts":"2026-07-27T21:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d220eb9938a15e3eb92d99842bac7ecf1040736baa3bde181403fc6ddc1c3b89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:39:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:39:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d220eb9938a15e3eb92d99842bac7ecf1040736baa3bde181403fc6ddc1c3b89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d220eb9938a15e3eb92d99842bac7ecf1040736baa3bde181403fc6ddc1c3b89","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d220eb9938a15e3eb92d99842bac7ecf1040736baa3bde181403fc6ddc1c3b89"} {"level":"debug","ts":"2026-07-27T21:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d220eb9938a15e3eb92d99842bac7ecf1040736baa3bde181403fc6ddc1c3b89","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d220eb9938a15e3eb92d99842bac7ecf1040736baa3bde181403fc6ddc1c3b89"} {"level":"debug","ts":"2026-07-27T21:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d220eb9938a15e3eb92d99842bac7ecf1040736baa3bde181403fc6ddc1c3b89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:39:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:39:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d220eb9938a15e3eb92d99842bac7ecf1040736baa3bde181403fc6ddc1c3b89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d220eb9938a15e3eb92d99842bac7ecf1040736baa3bde181403fc6ddc1c3b89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d220eb9938a15e3eb92d99842bac7ecf1040736baa3bde181403fc6ddc1c3b89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:39:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:39:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d220eb9938a15e3eb92d99842bac7ecf1040736baa3bde181403fc6ddc1c3b89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d220eb9938a15e3eb92d99842bac7ecf1040736baa3bde181403fc6ddc1c3b89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d220eb9938a15e3eb92d99842bac7ecf1040736baa3bde181403fc6ddc1c3b89","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d220eb9938a15e3eb92d99842bac7ecf1040736baa3bde181403fc6ddc1c3b89"} {"level":"debug","ts":"2026-07-27T21:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d220eb9938a15e3eb92d99842bac7ecf1040736baa3bde181403fc6ddc1c3b89","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d220eb9938a15e3eb92d99842bac7ecf1040736baa3bde181403fc6ddc1c3b89"} {"level":"debug","ts":"2026-07-27T21:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d220eb9938a15e3eb92d99842bac7ecf1040736baa3bde181403fc6ddc1c3b89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:39:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:39:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d220eb9938a15e3eb92d99842bac7ecf1040736baa3bde181403fc6ddc1c3b89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d220eb9938a15e3eb92d99842bac7ecf1040736baa3bde181403fc6ddc1c3b89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d220eb9938a15e3eb92d99842bac7ecf1040736baa3bde181403fc6ddc1c3b89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:39:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:39:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d220eb9938a15e3eb92d99842bac7ecf1040736baa3bde181403fc6ddc1c3b89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d220eb9938a15e3eb92d99842bac7ecf1040736baa3bde181403fc6ddc1c3b89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d220eb9938a15e3eb92d99842bac7ecf1040736baa3bde181403fc6ddc1c3b89","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d220eb9938a15e3eb92d99842bac7ecf1040736baa3bde181403fc6ddc1c3b89"} {"level":"debug","ts":"2026-07-27T21:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d220eb9938a15e3eb92d99842bac7ecf1040736baa3bde181403fc6ddc1c3b89","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d220eb9938a15e3eb92d99842bac7ecf1040736baa3bde181403fc6ddc1c3b89"} {"level":"debug","ts":"2026-07-27T21:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d220eb9938a15e3eb92d99842bac7ecf1040736baa3bde181403fc6ddc1c3b89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:39:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:39:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d220eb9938a15e3eb92d99842bac7ecf1040736baa3bde181403fc6ddc1c3b89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d220eb9938a15e3eb92d99842bac7ecf1040736baa3bde181403fc6ddc1c3b89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d220eb9938a15e3eb92d99842bac7ecf1040736baa3bde181403fc6ddc1c3b89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:39:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:39:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d220eb9938a15e3eb92d99842bac7ecf1040736baa3bde181403fc6ddc1c3b89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d220eb9938a15e3eb92d99842bac7ecf1040736baa3bde181403fc6ddc1c3b89","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d220eb9938a15e3eb92d99842bac7ecf1040736baa3bde181403fc6ddc1c3b89"} {"level":"debug","ts":"2026-07-27T21:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d220eb9938a15e3eb92d99842bac7ecf1040736baa3bde181403fc6ddc1c3b89","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d220eb9938a15e3eb92d99842bac7ecf1040736baa3bde181403fc6ddc1c3b89"} {"level":"debug","ts":"2026-07-27T21:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d220eb9938a15e3eb92d99842bac7ecf1040736baa3bde181403fc6ddc1c3b89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:39:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:39:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d220eb9938a15e3eb92d99842bac7ecf1040736baa3bde181403fc6ddc1c3b89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d220eb9938a15e3eb92d99842bac7ecf1040736baa3bde181403fc6ddc1c3b89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d220eb9938a15e3eb92d99842bac7ecf1040736baa3bde181403fc6ddc1c3b89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:39:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:39:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d220eb9938a15e3eb92d99842bac7ecf1040736baa3bde181403fc6ddc1c3b89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d220eb9938a15e3eb92d99842bac7ecf1040736baa3bde181403fc6ddc1c3b89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d220eb9938a15e3eb92d99842bac7ecf1040736baa3bde181403fc6ddc1c3b89","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d220eb9938a15e3eb92d99842bac7ecf1040736baa3bde181403fc6ddc1c3b89"} {"level":"debug","ts":"2026-07-27T21:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d220eb9938a15e3eb92d99842bac7ecf1040736baa3bde181403fc6ddc1c3b89","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d220eb9938a15e3eb92d99842bac7ecf1040736baa3bde181403fc6ddc1c3b89"} {"level":"debug","ts":"2026-07-27T21:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d220eb9938a15e3eb92d99842bac7ecf1040736baa3bde181403fc6ddc1c3b89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:39:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:39:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d220eb9938a15e3eb92d99842bac7ecf1040736baa3bde181403fc6ddc1c3b89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d220eb9938a15e3eb92d99842bac7ecf1040736baa3bde181403fc6ddc1c3b89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb0bb93224ce828e3066f0bff3b69d393dfd5533b564b6435e3a47c8db68baf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:39:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:39:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb0bb93224ce828e3066f0bff3b69d393dfd5533b564b6435e3a47c8db68baf0"} {"level":"info","ts":"2026-07-27T21:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d220eb9938a15e3eb92d99842bac7ecf1040736baa3bde181403fc6ddc1c3b89"} {"level":"info","ts":"2026-07-27T21:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb0bb93224ce828e3066f0bff3b69d393dfd5533b564b6435e3a47c8db68baf0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d220eb9938a15e3eb92d99842bac7ecf1040736baa3bde181403fc6ddc1c3b89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb0bb93224ce828e3066f0bff3b69d393dfd5533b564b6435e3a47c8db68baf0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb0bb93224ce828e3066f0bff3b69d393dfd5533b564b6435e3a47c8db68baf0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:39:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb0bb93224ce828e3066f0bff3b69d393dfd5533b564b6435e3a47c8db68baf0"} {"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb0bb93224ce828e3066f0bff3b69d393dfd5533b564b6435e3a47c8db68baf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb0bb93224ce828e3066f0bff3b69d393dfd5533b564b6435e3a47c8db68baf0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb0bb93224ce828e3066f0bff3b69d393dfd5533b564b6435e3a47c8db68baf0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb0bb93224ce828e3066f0bff3b69d393dfd5533b564b6435e3a47c8db68baf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb0bb93224ce828e3066f0bff3b69d393dfd5533b564b6435e3a47c8db68baf0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb0bb93224ce828e3066f0bff3b69d393dfd5533b564b6435e3a47c8db68baf0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb0bb93224ce828e3066f0bff3b69d393dfd5533b564b6435e3a47c8db68baf0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb0bb93224ce828e3066f0bff3b69d393dfd5533b564b6435e3a47c8db68baf0"} {"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb0bb93224ce828e3066f0bff3b69d393dfd5533b564b6435e3a47c8db68baf0"} {"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb0bb93224ce828e3066f0bff3b69d393dfd5533b564b6435e3a47c8db68baf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb0bb93224ce828e3066f0bff3b69d393dfd5533b564b6435e3a47c8db68baf0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb0bb93224ce828e3066f0bff3b69d393dfd5533b564b6435e3a47c8db68baf0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb0bb93224ce828e3066f0bff3b69d393dfd5533b564b6435e3a47c8db68baf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb0bb93224ce828e3066f0bff3b69d393dfd5533b564b6435e3a47c8db68baf0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb0bb93224ce828e3066f0bff3b69d393dfd5533b564b6435e3a47c8db68baf0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb0bb93224ce828e3066f0bff3b69d393dfd5533b564b6435e3a47c8db68baf0"} {"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb0bb93224ce828e3066f0bff3b69d393dfd5533b564b6435e3a47c8db68baf0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb0bb93224ce828e3066f0bff3b69d393dfd5533b564b6435e3a47c8db68baf0"} {"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb0bb93224ce828e3066f0bff3b69d393dfd5533b564b6435e3a47c8db68baf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb0bb93224ce828e3066f0bff3b69d393dfd5533b564b6435e3a47c8db68baf0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb0bb93224ce828e3066f0bff3b69d393dfd5533b564b6435e3a47c8db68baf0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb0bb93224ce828e3066f0bff3b69d393dfd5533b564b6435e3a47c8db68baf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb0bb93224ce828e3066f0bff3b69d393dfd5533b564b6435e3a47c8db68baf0"} {"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb0bb93224ce828e3066f0bff3b69d393dfd5533b564b6435e3a47c8db68baf0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb0bb93224ce828e3066f0bff3b69d393dfd5533b564b6435e3a47c8db68baf0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb0bb93224ce828e3066f0bff3b69d393dfd5533b564b6435e3a47c8db68baf0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb0bb93224ce828e3066f0bff3b69d393dfd5533b564b6435e3a47c8db68baf0"} {"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb0bb93224ce828e3066f0bff3b69d393dfd5533b564b6435e3a47c8db68baf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb0bb93224ce828e3066f0bff3b69d393dfd5533b564b6435e3a47c8db68baf0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb0bb93224ce828e3066f0bff3b69d393dfd5533b564b6435e3a47c8db68baf0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9009a84f95de6aec6b5d635a781c6c80493b9e70c07979eb1f1a39f8dc37ba1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9009a84f95de6aec6b5d635a781c6c80493b9e70c07979eb1f1a39f8dc37ba1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb0bb93224ce828e3066f0bff3b69d393dfd5533b564b6435e3a47c8db68baf0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9009a84f95de6aec6b5d635a781c6c80493b9e70c07979eb1f1a39f8dc37ba1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9009a84f95de6aec6b5d635a781c6c80493b9e70c07979eb1f1a39f8dc37ba1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9009a84f95de6aec6b5d635a781c6c80493b9e70c07979eb1f1a39f8dc37ba1"} {"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9009a84f95de6aec6b5d635a781c6c80493b9e70c07979eb1f1a39f8dc37ba1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9009a84f95de6aec6b5d635a781c6c80493b9e70c07979eb1f1a39f8dc37ba1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9009a84f95de6aec6b5d635a781c6c80493b9e70c07979eb1f1a39f8dc37ba1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9009a84f95de6aec6b5d635a781c6c80493b9e70c07979eb1f1a39f8dc37ba1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb0bb93224ce828e3066f0bff3b69d393dfd5533b564b6435e3a47c8db68baf0"} {"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9009a84f95de6aec6b5d635a781c6c80493b9e70c07979eb1f1a39f8dc37ba1"} {"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4"} {"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4"} {"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd"} {"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4"} {"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd"} {"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4"} {"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc0b14ef275a1f938b89f85b9dea2e23e84f1888f6f91832fd8652e9a784b9c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd"} {"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc0b14ef275a1f938b89f85b9dea2e23e84f1888f6f91832fd8652e9a784b9c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc0b14ef275a1f938b89f85b9dea2e23e84f1888f6f91832fd8652e9a784b9c3"} {"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc0b14ef275a1f938b89f85b9dea2e23e84f1888f6f91832fd8652e9a784b9c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc0b14ef275a1f938b89f85b9dea2e23e84f1888f6f91832fd8652e9a784b9c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc0b14ef275a1f938b89f85b9dea2e23e84f1888f6f91832fd8652e9a784b9c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4"} {"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc0b14ef275a1f938b89f85b9dea2e23e84f1888f6f91832fd8652e9a784b9c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc0b14ef275a1f938b89f85b9dea2e23e84f1888f6f91832fd8652e9a784b9c3"} {"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc0b14ef275a1f938b89f85b9dea2e23e84f1888f6f91832fd8652e9a784b9c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"199ca4e1d985d9bcbb693fa72943eb258a4d44684555fc85c9e61f52907a932f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4"} {"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"199ca4e1d985d9bcbb693fa72943eb258a4d44684555fc85c9e61f52907a932f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc0b14ef275a1f938b89f85b9dea2e23e84f1888f6f91832fd8652e9a784b9c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc0b14ef275a1f938b89f85b9dea2e23e84f1888f6f91832fd8652e9a784b9c3"} {"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"199ca4e1d985d9bcbb693fa72943eb258a4d44684555fc85c9e61f52907a932f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/199ca4e1d985d9bcbb693fa72943eb258a4d44684555fc85c9e61f52907a932f"} {"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"199ca4e1d985d9bcbb693fa72943eb258a4d44684555fc85c9e61f52907a932f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc0b14ef275a1f938b89f85b9dea2e23e84f1888f6f91832fd8652e9a784b9c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc0b14ef275a1f938b89f85b9dea2e23e84f1888f6f91832fd8652e9a784b9c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4"} {"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc0b14ef275a1f938b89f85b9dea2e23e84f1888f6f91832fd8652e9a784b9c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"199ca4e1d985d9bcbb693fa72943eb258a4d44684555fc85c9e61f52907a932f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc0b14ef275a1f938b89f85b9dea2e23e84f1888f6f91832fd8652e9a784b9c3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/199ca4e1d985d9bcbb693fa72943eb258a4d44684555fc85c9e61f52907a932f"} {"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc0b14ef275a1f938b89f85b9dea2e23e84f1888f6f91832fd8652e9a784b9c3"} {"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"199ca4e1d985d9bcbb693fa72943eb258a4d44684555fc85c9e61f52907a932f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["199ca4e1d985d9bcbb693fa72943eb258a4d44684555fc85c9e61f52907a932f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d"} {"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"199ca4e1d985d9bcbb693fa72943eb258a4d44684555fc85c9e61f52907a932f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d"} {"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"199ca4e1d985d9bcbb693fa72943eb258a4d44684555fc85c9e61f52907a932f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/199ca4e1d985d9bcbb693fa72943eb258a4d44684555fc85c9e61f52907a932f"} {"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d"} {"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"199ca4e1d985d9bcbb693fa72943eb258a4d44684555fc85c9e61f52907a932f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/199ca4e1d985d9bcbb693fa72943eb258a4d44684555fc85c9e61f52907a932f"} {"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36146c37313c8d0f944da45c61f14b78c3909e2dd5b3e43445f08a4e1f2c18e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36146c37313c8d0f944da45c61f14b78c3909e2dd5b3e43445f08a4e1f2c18e3"} {"level":"info","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36146c37313c8d0f944da45c61f14b78c3909e2dd5b3e43445f08a4e1f2c18e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"199ca4e1d985d9bcbb693fa72943eb258a4d44684555fc85c9e61f52907a932f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:39:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["199ca4e1d985d9bcbb693fa72943eb258a4d44684555fc85c9e61f52907a932f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"199ca4e1d985d9bcbb693fa72943eb258a4d44684555fc85c9e61f52907a932f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:39:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d"} {"level":"info","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36146c37313c8d0f944da45c61f14b78c3909e2dd5b3e43445f08a4e1f2c18e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"199ca4e1d985d9bcbb693fa72943eb258a4d44684555fc85c9e61f52907a932f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:39:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36146c37313c8d0f944da45c61f14b78c3909e2dd5b3e43445f08a4e1f2c18e3"} {"level":"info","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/199ca4e1d985d9bcbb693fa72943eb258a4d44684555fc85c9e61f52907a932f"} {"level":"info","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36146c37313c8d0f944da45c61f14b78c3909e2dd5b3e43445f08a4e1f2c18e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36146c37313c8d0f944da45c61f14b78c3909e2dd5b3e43445f08a4e1f2c18e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac"} {"level":"info","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36146c37313c8d0f944da45c61f14b78c3909e2dd5b3e43445f08a4e1f2c18e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:39:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d"} {"level":"info","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51"} {"level":"info","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37266b963f774930c89dbda73782c412819f990c8ed661873f43424110ad2bfe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:39:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37266b963f774930c89dbda73782c412819f990c8ed661873f43424110ad2bfe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36146c37313c8d0f944da45c61f14b78c3909e2dd5b3e43445f08a4e1f2c18e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37266b963f774930c89dbda73782c412819f990c8ed661873f43424110ad2bfe"} {"level":"info","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37266b963f774930c89dbda73782c412819f990c8ed661873f43424110ad2bfe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37266b963f774930c89dbda73782c412819f990c8ed661873f43424110ad2bfe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36146c37313c8d0f944da45c61f14b78c3909e2dd5b3e43445f08a4e1f2c18e3"} {"level":"info","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37266b963f774930c89dbda73782c412819f990c8ed661873f43424110ad2bfe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:39:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51"} {"level":"info","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37266b963f774930c89dbda73782c412819f990c8ed661873f43424110ad2bfe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac"} {"level":"info","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37266b963f774930c89dbda73782c412819f990c8ed661873f43424110ad2bfe"} {"level":"error","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:39:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51"} {"level":"info","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51"} {"level":"debug","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:39:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51"} {"level":"info","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51"} {"level":"debug","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51"} {"level":"info","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bae5d2d5-fb64-4842-aecc-c8f7f3e019ac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:33322","PortSpecifier":{"PortValue":33322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bae5d2d5-fb64-4842-aecc-c8f7f3e019ac","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c910ce.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bae5d2d5-fb64-4842-aecc-c8f7f3e019ac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:33322","PortSpecifier":{"PortValue":33322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785188367,"nanos":138124529},"http":{"id":"bae5d2d5-fb64-4842-aecc-c8f7f3e019ac","method":"POST","headers":{":authority":"e2e-shared-a-c910ce.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bae5d2d5-fb64-4842-aecc-c8f7f3e019ac","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bae5d2d5-fb64-4842-aecc-c8f7f3e019ac","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"cbd7f247-ea90-43d8-8ce3-e28a2a121794","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6ac1e77f-7df8-4dea-ab0c-bf8d022a6519"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa88232987eb"]}} {"level":"debug","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bae5d2d5-fb64-4842-aecc-c8f7f3e019ac","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa88232987eb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6ac1e77f-7df8-4dea-ab0c-bf8d022a6519"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"cbd7f247-ea90-43d8-8ce3-e28a2a121794","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f1ab5942392897eb6acfcbe34d1617f2f14e4794eed0129100da850801e0c30b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c910ce.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bae5d2d5-fb64-4842-aecc-c8f7f3e019ac","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bae5d2d5-fb64-4842-aecc-c8f7f3e019ac","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bae5d2d5-fb64-4842-aecc-c8f7f3e019ac","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c910ce/rate-test-model-c910ce\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c910ce/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bae5d2d5-fb64-4842-aecc-c8f7f3e019ac","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bae5d2d5-fb64-4842-aecc-c8f7f3e019ac","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bae5d2d5-fb64-4842-aecc-c8f7f3e019ac","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bae5d2d5-fb64-4842-aecc-c8f7f3e019ac","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bae5d2d5-fb64-4842-aecc-c8f7f3e019ac","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1c409158-5bbe-4ac8-8f5b-14e1fe1b1437","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35496","PortSpecifier":{"PortValue":35496}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1c409158-5bbe-4ac8-8f5b-14e1fe1b1437","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-85f004.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1c409158-5bbe-4ac8-8f5b-14e1fe1b1437","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35496","PortSpecifier":{"PortValue":35496}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785188367,"nanos":175727885},"http":{"id":"1c409158-5bbe-4ac8-8f5b-14e1fe1b1437","method":"POST","headers":{":authority":"e2e-shared-b-85f004.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1c409158-5bbe-4ac8-8f5b-14e1fe1b1437","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1c409158-5bbe-4ac8-8f5b-14e1fe1b1437","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"cbd7f247-ea90-43d8-8ce3-e28a2a121794","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6ac1e77f-7df8-4dea-ab0c-bf8d022a6519"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa88232987eb"]}} {"level":"debug","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1c409158-5bbe-4ac8-8f5b-14e1fe1b1437","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa88232987eb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6ac1e77f-7df8-4dea-ab0c-bf8d022a6519"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"cbd7f247-ea90-43d8-8ce3-e28a2a121794","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-85f004.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c409158-5bbe-4ac8-8f5b-14e1fe1b1437","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c409158-5bbe-4ac8-8f5b-14e1fe1b1437","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c409158-5bbe-4ac8-8f5b-14e1fe1b1437","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-85f004/rate-test-model-85f004\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-85f004/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1c409158-5bbe-4ac8-8f5b-14e1fe1b1437","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1c409158-5bbe-4ac8-8f5b-14e1fe1b1437","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1c409158-5bbe-4ac8-8f5b-14e1fe1b1437","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1c409158-5bbe-4ac8-8f5b-14e1fe1b1437","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1c409158-5bbe-4ac8-8f5b-14e1fe1b1437","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"649e7b52-c165-42e5-9416-05047c1394d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:33334","PortSpecifier":{"PortValue":33334}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"649e7b52-c165-42e5-9416-05047c1394d1","method":"POST","path":"/ai-tenant-e2e-shared-a-c910ce/rate-test-model-c910ce/v1/completions","host":"e2e-shared-a-c910ce.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"649e7b52-c165-42e5-9416-05047c1394d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:33334","PortSpecifier":{"PortValue":33334}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785188367,"nanos":213402093},"http":{"id":"649e7b52-c165-42e5-9416-05047c1394d1","method":"POST","headers":{":authority":"e2e-shared-a-c910ce.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c910ce/rate-test-model-c910ce/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"649e7b52-c165-42e5-9416-05047c1394d1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-RrnlEJCIKTsSp50R_rxuOeCEhheSWY4mroSNBbf6uNM6BjhW8ZEQRSJplEYj"} {"level":"debug","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"649e7b52-c165-42e5-9416-05047c1394d1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c910ce.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-RrnlEJCIKTsSp50R_rxuOeCEhheSWY4mroSNBbf6uNM6BjhW8ZEQRSJplEYj\"}"} {"level":"debug","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"649e7b52-c165-42e5-9416-05047c1394d1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c910ce.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6b72283b-5ff1-4e63-ba58-6cc8bc019ad1","keyName":"e2e-rate-a-4edc67","subscription":"e2e-rate-iso-a-4edc67","tenant":"e2e-shared-a-c910ce","userId":"6b72283b-5ff1-4e63-ba58-6cc8bc019ad1","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"649e7b52-c165-42e5-9416-05047c1394d1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c910ce.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c910ce/rate-test-model-c910ce\",\"requestedSubscription\":\"e2e-rate-iso-a-4edc67\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"649e7b52-c165-42e5-9416-05047c1394d1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c910ce.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-c910ce/models/facebook/opt-125m","name":"rate-test-model-c910ce","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4edc67","namespace":"ai-tenant-e2e-shared-a-c910ce","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-c910ce/rate-test-model-c910ce"}} {"level":"debug","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"649e7b52-c165-42e5-9416-05047c1394d1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"649e7b52-c165-42e5-9416-05047c1394d1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"649e7b52-c165-42e5-9416-05047c1394d1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"649e7b52-c165-42e5-9416-05047c1394d1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"649e7b52-c165-42e5-9416-05047c1394d1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c910ce/rate-test-model-c910ce\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c910ce/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"649e7b52-c165-42e5-9416-05047c1394d1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"649e7b52-c165-42e5-9416-05047c1394d1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-4edc67"} {"level":"debug","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"649e7b52-c165-42e5-9416-05047c1394d1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"649e7b52-c165-42e5-9416-05047c1394d1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6b72283b-5ff1-4e63-ba58-6cc8bc019ad1","keyName":"e2e-rate-a-4edc67","selected_subscription":"e2e-rate-iso-a-4edc67","selected_subscription_key":"ai-tenant-e2e-shared-a-c910ce/e2e-rate-iso-a-4edc67@ai-tenant-e2e-shared-a-c910ce/rate-test-model-c910ce","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-c910ce/models/facebook/opt-125m","name":"rate-test-model-c910ce","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4edc67","namespace":"ai-tenant-e2e-shared-a-c910ce","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-c910ce/rate-test-model-c910ce"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"649e7b52-c165-42e5-9416-05047c1394d1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T21:39:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"649e7b52-c165-42e5-9416-05047c1394d1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T21:39:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a1e5300a-511f-4754-8eb6-4d81fa0d6f5c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:33342","PortSpecifier":{"PortValue":33342}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a1e5300a-511f-4754-8eb6-4d81fa0d6f5c","method":"POST","path":"/ai-tenant-e2e-shared-a-c910ce/rate-test-model-c910ce/v1/completions","host":"e2e-shared-a-c910ce.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T21:39:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a1e5300a-511f-4754-8eb6-4d81fa0d6f5c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:33342","PortSpecifier":{"PortValue":33342}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785188368,"nanos":252204005},"http":{"id":"a1e5300a-511f-4754-8eb6-4d81fa0d6f5c","method":"POST","headers":{":authority":"e2e-shared-a-c910ce.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c910ce/rate-test-model-c910ce/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T21:39:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a1e5300a-511f-4754-8eb6-4d81fa0d6f5c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-RrnlEJCIKTsSp50R_rxuOeCEhheSWY4mroSNBbf6uNM6BjhW8ZEQRSJplEYj"} {"level":"debug","ts":"2026-07-27T21:39:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a1e5300a-511f-4754-8eb6-4d81fa0d6f5c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c910ce.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-RrnlEJCIKTsSp50R_rxuOeCEhheSWY4mroSNBbf6uNM6BjhW8ZEQRSJplEYj\"}"} {"level":"debug","ts":"2026-07-27T21:39:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a1e5300a-511f-4754-8eb6-4d81fa0d6f5c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c910ce.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6b72283b-5ff1-4e63-ba58-6cc8bc019ad1","keyName":"e2e-rate-a-4edc67","subscription":"e2e-rate-iso-a-4edc67","tenant":"e2e-shared-a-c910ce","userId":"6b72283b-5ff1-4e63-ba58-6cc8bc019ad1","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-27T21:39:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a1e5300a-511f-4754-8eb6-4d81fa0d6f5c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c910ce.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c910ce/rate-test-model-c910ce\",\"requestedSubscription\":\"e2e-rate-iso-a-4edc67\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-27T21:39:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a1e5300a-511f-4754-8eb6-4d81fa0d6f5c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c910ce.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-c910ce/models/facebook/opt-125m","name":"rate-test-model-c910ce","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4edc67","namespace":"ai-tenant-e2e-shared-a-c910ce","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-c910ce/rate-test-model-c910ce"}} {"level":"debug","ts":"2026-07-27T21:39:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a1e5300a-511f-4754-8eb6-4d81fa0d6f5c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T21:39:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1e5300a-511f-4754-8eb6-4d81fa0d6f5c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:39:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1e5300a-511f-4754-8eb6-4d81fa0d6f5c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c910ce/rate-test-model-c910ce\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c910ce/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:39:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1e5300a-511f-4754-8eb6-4d81fa0d6f5c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:39:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1e5300a-511f-4754-8eb6-4d81fa0d6f5c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:39:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1e5300a-511f-4754-8eb6-4d81fa0d6f5c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-4edc67"} {"level":"debug","ts":"2026-07-27T21:39:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1e5300a-511f-4754-8eb6-4d81fa0d6f5c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T21:39:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1e5300a-511f-4754-8eb6-4d81fa0d6f5c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-27T21:39:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1e5300a-511f-4754-8eb6-4d81fa0d6f5c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6b72283b-5ff1-4e63-ba58-6cc8bc019ad1","keyName":"e2e-rate-a-4edc67","selected_subscription":"e2e-rate-iso-a-4edc67","selected_subscription_key":"ai-tenant-e2e-shared-a-c910ce/e2e-rate-iso-a-4edc67@ai-tenant-e2e-shared-a-c910ce/rate-test-model-c910ce","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-c910ce/models/facebook/opt-125m","name":"rate-test-model-c910ce","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4edc67","namespace":"ai-tenant-e2e-shared-a-c910ce","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-c910ce/rate-test-model-c910ce"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-27T21:39:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a1e5300a-511f-4754-8eb6-4d81fa0d6f5c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T21:39:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a1e5300a-511f-4754-8eb6-4d81fa0d6f5c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T21:39:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2cac3f12-3a89-41d0-964a-0b578f2872d8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:33356","PortSpecifier":{"PortValue":33356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2cac3f12-3a89-41d0-964a-0b578f2872d8","method":"POST","path":"/ai-tenant-e2e-shared-a-c910ce/rate-test-model-c910ce/v1/completions","host":"e2e-shared-a-c910ce.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T21:39:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2cac3f12-3a89-41d0-964a-0b578f2872d8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:33356","PortSpecifier":{"PortValue":33356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785188369,"nanos":292497342},"http":{"id":"2cac3f12-3a89-41d0-964a-0b578f2872d8","method":"POST","headers":{":authority":"e2e-shared-a-c910ce.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c910ce/rate-test-model-c910ce/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T21:39:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2cac3f12-3a89-41d0-964a-0b578f2872d8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-RrnlEJCIKTsSp50R_rxuOeCEhheSWY4mroSNBbf6uNM6BjhW8ZEQRSJplEYj"} {"level":"debug","ts":"2026-07-27T21:39:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2cac3f12-3a89-41d0-964a-0b578f2872d8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c910ce.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-RrnlEJCIKTsSp50R_rxuOeCEhheSWY4mroSNBbf6uNM6BjhW8ZEQRSJplEYj\"}"} {"level":"debug","ts":"2026-07-27T21:39:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2cac3f12-3a89-41d0-964a-0b578f2872d8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c910ce.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6b72283b-5ff1-4e63-ba58-6cc8bc019ad1","keyName":"e2e-rate-a-4edc67","subscription":"e2e-rate-iso-a-4edc67","tenant":"e2e-shared-a-c910ce","userId":"6b72283b-5ff1-4e63-ba58-6cc8bc019ad1","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-27T21:39:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2cac3f12-3a89-41d0-964a-0b578f2872d8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c910ce.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c910ce/rate-test-model-c910ce\",\"requestedSubscription\":\"e2e-rate-iso-a-4edc67\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-27T21:39:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2cac3f12-3a89-41d0-964a-0b578f2872d8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c910ce.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-c910ce/models/facebook/opt-125m","name":"rate-test-model-c910ce","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4edc67","namespace":"ai-tenant-e2e-shared-a-c910ce","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-c910ce/rate-test-model-c910ce"}} {"level":"debug","ts":"2026-07-27T21:39:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2cac3f12-3a89-41d0-964a-0b578f2872d8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T21:39:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2cac3f12-3a89-41d0-964a-0b578f2872d8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:39:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2cac3f12-3a89-41d0-964a-0b578f2872d8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c910ce/rate-test-model-c910ce\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c910ce/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:39:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2cac3f12-3a89-41d0-964a-0b578f2872d8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:39:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2cac3f12-3a89-41d0-964a-0b578f2872d8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:39:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2cac3f12-3a89-41d0-964a-0b578f2872d8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T21:39:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2cac3f12-3a89-41d0-964a-0b578f2872d8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-27T21:39:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2cac3f12-3a89-41d0-964a-0b578f2872d8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-4edc67"} {"level":"debug","ts":"2026-07-27T21:39:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2cac3f12-3a89-41d0-964a-0b578f2872d8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6b72283b-5ff1-4e63-ba58-6cc8bc019ad1","keyName":"e2e-rate-a-4edc67","selected_subscription":"e2e-rate-iso-a-4edc67","selected_subscription_key":"ai-tenant-e2e-shared-a-c910ce/e2e-rate-iso-a-4edc67@ai-tenant-e2e-shared-a-c910ce/rate-test-model-c910ce","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-c910ce/models/facebook/opt-125m","name":"rate-test-model-c910ce","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4edc67","namespace":"ai-tenant-e2e-shared-a-c910ce","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-c910ce/rate-test-model-c910ce"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-27T21:39:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2cac3f12-3a89-41d0-964a-0b578f2872d8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T21:39:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2cac3f12-3a89-41d0-964a-0b578f2872d8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T21:39:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c7ec6051-4c05-4dd9-a950-1f7fc0020872","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35504","PortSpecifier":{"PortValue":35504}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c7ec6051-4c05-4dd9-a950-1f7fc0020872","method":"POST","path":"/ai-tenant-e2e-shared-b-85f004/rate-test-model-85f004/v1/completions","host":"e2e-shared-b-85f004.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T21:39:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c7ec6051-4c05-4dd9-a950-1f7fc0020872","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35504","PortSpecifier":{"PortValue":35504}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785188369,"nanos":329851287},"http":{"id":"c7ec6051-4c05-4dd9-a950-1f7fc0020872","method":"POST","headers":{":authority":"e2e-shared-b-85f004.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-85f004/rate-test-model-85f004/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T21:39:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c7ec6051-4c05-4dd9-a950-1f7fc0020872","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Bjc6iCQzosGQSfhp_W8KXJYu3N45WRRJh2zqIDY2PqGrX9LkWWCchdYkCja1"} {"level":"debug","ts":"2026-07-27T21:39:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c7ec6051-4c05-4dd9-a950-1f7fc0020872","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-85f004.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Bjc6iCQzosGQSfhp_W8KXJYu3N45WRRJh2zqIDY2PqGrX9LkWWCchdYkCja1\"}"} {"level":"debug","ts":"2026-07-27T21:39:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c7ec6051-4c05-4dd9-a950-1f7fc0020872","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-85f004.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9b7ecc4c-bcda-4338-ba7c-444c754a9118","keyName":"e2e-rate-b-4edc67","subscription":"e2e-rate-iso-b-4edc67","tenant":"e2e-shared-b-85f004","userId":"9b7ecc4c-bcda-4338-ba7c-444c754a9118","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-27T21:39:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c7ec6051-4c05-4dd9-a950-1f7fc0020872","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-85f004.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-85f004/rate-test-model-85f004\",\"requestedSubscription\":\"e2e-rate-iso-b-4edc67\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-27T21:39:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c7ec6051-4c05-4dd9-a950-1f7fc0020872","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-85f004.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-85f004/models/facebook/opt-125m","name":"rate-test-model-85f004","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-4edc67","namespace":"ai-tenant-e2e-shared-b-85f004","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-85f004/rate-test-model-85f004"}} {"level":"debug","ts":"2026-07-27T21:39:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c7ec6051-4c05-4dd9-a950-1f7fc0020872","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T21:39:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7ec6051-4c05-4dd9-a950-1f7fc0020872","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:39:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7ec6051-4c05-4dd9-a950-1f7fc0020872","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:39:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7ec6051-4c05-4dd9-a950-1f7fc0020872","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-85f004/rate-test-model-85f004\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-85f004/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:39:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7ec6051-4c05-4dd9-a950-1f7fc0020872","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:39:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c7ec6051-4c05-4dd9-a950-1f7fc0020872","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T21:39:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c7ec6051-4c05-4dd9-a950-1f7fc0020872","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-4edc67"} {"level":"debug","ts":"2026-07-27T21:39:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c7ec6051-4c05-4dd9-a950-1f7fc0020872","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-27T21:39:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c7ec6051-4c05-4dd9-a950-1f7fc0020872","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9b7ecc4c-bcda-4338-ba7c-444c754a9118","keyName":"e2e-rate-b-4edc67","selected_subscription":"e2e-rate-iso-b-4edc67","selected_subscription_key":"ai-tenant-e2e-shared-b-85f004/e2e-rate-iso-b-4edc67@ai-tenant-e2e-shared-b-85f004/rate-test-model-85f004","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-85f004/models/facebook/opt-125m","name":"rate-test-model-85f004","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-4edc67","namespace":"ai-tenant-e2e-shared-b-85f004","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-85f004/rate-test-model-85f004"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-27T21:39:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c7ec6051-4c05-4dd9-a950-1f7fc0020872","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T21:39:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c7ec6051-4c05-4dd9-a950-1f7fc0020872","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T21:39:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/287c623a6d59c280f101d2dea66aca11dc27eae782a9534c65c9e3ba236e7056"} {"level":"info","ts":"2026-07-27T21:39:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c19267a895884d6614bd4c9a3aa4387ab45279ea15600d47e0f55cfe9ffbbc1e"} {"level":"info","ts":"2026-07-27T21:39:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cdf2c8d98571b940096aed06bec2cfd4017595027fded80cd2b0f12d12a4663e"} {"level":"info","ts":"2026-07-27T21:39:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8586fb43859b9791871b3193a44f199a6082845ea2cd1110ad3cca9c8057cb47"} {"level":"info","ts":"2026-07-27T21:39:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f1ab5942392897eb6acfcbe34d1617f2f14e4794eed0129100da850801e0c30b"} {"level":"info","ts":"2026-07-27T21:39:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5f24bb28e67e35540a7ba1c36be3bc2bb89a07fb42589fc05899bec9965a21d5"} {"level":"info","ts":"2026-07-27T21:39:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/52e0b2ae7207f6f1a69ced603bf964720a97576c981ffab94980b9668b0b43a4"} {"level":"info","ts":"2026-07-27T21:39:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/339d7b6e49b67ccbdcb001c63e34fc2bfa34d163c1586a3d0dc3c4ca2dd63c2b"} {"level":"info","ts":"2026-07-27T21:39:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/37266b963f774930c89dbda73782c412819f990c8ed661873f43424110ad2bfe"} {"level":"info","ts":"2026-07-27T21:39:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/83e113db11e1d7769f7baefdf8f53f467afa6026a796d4e809c7bb7e597f4b50"} {"level":"info","ts":"2026-07-27T21:39:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/caaf795a72a77d65ade046d43d1447c7b84aef2815b86c6410a9bbb5ddbdbc63"} {"level":"info","ts":"2026-07-27T21:39:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/13d049f9e2e570562863535fa04869325c25d91c8293822cec4be784128867cd"} {"level":"info","ts":"2026-07-27T21:39:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d9009a84f95de6aec6b5d635a781c6c80493b9e70c07979eb1f1a39f8dc37ba1"} {"level":"info","ts":"2026-07-27T21:39:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e9e21395dfb454d870c4323a8eb5938977617ee52f19fc375f82cfccfbd93cac"} {"level":"info","ts":"2026-07-27T21:39:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/44946842f9aa166ce832791eb43dd729c78383ce4cc8a1f50f57f844841b207d"} {"level":"info","ts":"2026-07-27T21:39:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/199ca4e1d985d9bcbb693fa72943eb258a4d44684555fc85c9e61f52907a932f"} {"level":"info","ts":"2026-07-27T21:39:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2ac24139f34c4e93475e31a689b517d481aa1eb13bcd266c5ef3e3135a8b0e51"} {"level":"info","ts":"2026-07-27T21:39:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/36146c37313c8d0f944da45c61f14b78c3909e2dd5b3e43445f08a4e1f2c18e3"} {"level":"info","ts":"2026-07-27T21:39:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/962bb5cf75519c42be2acd18a1f63f8d0aa47eed4eb717337db06a29f9935cb4"} {"level":"info","ts":"2026-07-27T21:39:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b001df80d9833009db4bba5917e6bef4149182d96911856a89e11ddeff551639"} {"level":"info","ts":"2026-07-27T21:39:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d220eb9938a15e3eb92d99842bac7ecf1040736baa3bde181403fc6ddc1c3b89"} {"level":"info","ts":"2026-07-27T21:39:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bc0b14ef275a1f938b89f85b9dea2e23e84f1888f6f91832fd8652e9a784b9c3"} {"level":"info","ts":"2026-07-27T21:39:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cb0bb93224ce828e3066f0bff3b69d393dfd5533b564b6435e3a47c8db68baf0"} {"level":"info","ts":"2026-07-27T21:39:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/031f17ebd4e8e0d3314d9906623d965d8eaa207e68f84c7e445fc51bd8f65c07"} {"level":"info","ts":"2026-07-27T21:40:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ec23e1a9-ddae-4e48-834a-901a2cdfbd17","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:32778","PortSpecifier":{"PortValue":32778}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.32:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ec23e1a9-ddae-4e48-834a-901a2cdfbd17","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T21:40:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ec23e1a9-ddae-4e48-834a-901a2cdfbd17","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:32778","PortSpecifier":{"PortValue":32778}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.32:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785188435,"nanos":474053202},"http":{"id":"ec23e1a9-ddae-4e48-834a-901a2cdfbd17","method":"POST","headers":{":authority":"maas.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T21:40:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ec23e1a9-ddae-4e48-834a-901a2cdfbd17","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T21:40:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ec23e1a9-ddae-4e48-834a-901a2cdfbd17","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"cbd7f247-ea90-43d8-8ce3-e28a2a121794","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6ac1e77f-7df8-4dea-ab0c-bf8d022a6519"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa88232987eb"]}} {"level":"debug","ts":"2026-07-27T21:40:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ec23e1a9-ddae-4e48-834a-901a2cdfbd17","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa88232987eb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6ac1e77f-7df8-4dea-ab0c-bf8d022a6519"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"cbd7f247-ea90-43d8-8ce3-e28a2a121794","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.32:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T21:40:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec23e1a9-ddae-4e48-834a-901a2cdfbd17","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:40:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec23e1a9-ddae-4e48-834a-901a2cdfbd17","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:40:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec23e1a9-ddae-4e48-834a-901a2cdfbd17","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:40:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ec23e1a9-ddae-4e48-834a-901a2cdfbd17","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T21:40:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec23e1a9-ddae-4e48-834a-901a2cdfbd17","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T21:40:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec23e1a9-ddae-4e48-834a-901a2cdfbd17","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-27T21:40:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ec23e1a9-ddae-4e48-834a-901a2cdfbd17","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T21:40:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ec23e1a9-ddae-4e48-834a-901a2cdfbd17","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T21:40:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c9ce8071-15df-4cd3-bcc6-1dce4fa2fe13","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:32782","PortSpecifier":{"PortValue":32782}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.32:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c9ce8071-15df-4cd3-bcc6-1dce4fa2fe13","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T21:40:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c9ce8071-15df-4cd3-bcc6-1dce4fa2fe13","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:32782","PortSpecifier":{"PortValue":32782}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.32:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785188435,"nanos":540857701},"http":{"id":"c9ce8071-15df-4cd3-bcc6-1dce4fa2fe13","method":"POST","headers":{":authority":"maas.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T21:40:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c9ce8071-15df-4cd3-bcc6-1dce4fa2fe13","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-sRTTPgltSSMNKHHU_dVGqMDCnnQGL0hrsS7amu80GW40psS6iLMSMZZVpGm2"} {"level":"debug","ts":"2026-07-27T21:40:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c9ce8071-15df-4cd3-bcc6-1dce4fa2fe13","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-sRTTPgltSSMNKHHU_dVGqMDCnnQGL0hrsS7amu80GW40psS6iLMSMZZVpGm2\"}"} {"level":"debug","ts":"2026-07-27T21:40:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c9ce8071-15df-4cd3-bcc6-1dce4fa2fe13","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9447e019-01ab-413f-8ae5-8a8257cd82cf","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"9447e019-01ab-413f-8ae5-8a8257cd82cf","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-27T21:40:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c9ce8071-15df-4cd3-bcc6-1dce4fa2fe13","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-27T21:40:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c9ce8071-15df-4cd3-bcc6-1dce4fa2fe13","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}} {"level":"debug","ts":"2026-07-27T21:40:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c9ce8071-15df-4cd3-bcc6-1dce4fa2fe13","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.32:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T21:40:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9ce8071-15df-4cd3-bcc6-1dce4fa2fe13","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:40:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9ce8071-15df-4cd3-bcc6-1dce4fa2fe13","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:40:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9ce8071-15df-4cd3-bcc6-1dce4fa2fe13","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:40:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9ce8071-15df-4cd3-bcc6-1dce4fa2fe13","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:40:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9ce8071-15df-4cd3-bcc6-1dce4fa2fe13","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T21:40:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9ce8071-15df-4cd3-bcc6-1dce4fa2fe13","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-07-27T21:40:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9ce8071-15df-4cd3-bcc6-1dce4fa2fe13","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-27T21:40:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9ce8071-15df-4cd3-bcc6-1dce4fa2fe13","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9447e019-01ab-413f-8ae5-8a8257cd82cf","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-27T21:40:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c9ce8071-15df-4cd3-bcc6-1dce4fa2fe13","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T21:40:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c9ce8071-15df-4cd3-bcc6-1dce4fa2fe13","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T21:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df6dc1fca31d224913aba2ebd668fdc2c70d7e99a60a85c9b4771034e6370bf8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:41:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:41:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df6dc1fca31d224913aba2ebd668fdc2c70d7e99a60a85c9b4771034e6370bf8"} {"level":"info","ts":"2026-07-27T21:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df6dc1fca31d224913aba2ebd668fdc2c70d7e99a60a85c9b4771034e6370bf8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df6dc1fca31d224913aba2ebd668fdc2c70d7e99a60a85c9b4771034e6370bf8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df6dc1fca31d224913aba2ebd668fdc2c70d7e99a60a85c9b4771034e6370bf8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df6dc1fca31d224913aba2ebd668fdc2c70d7e99a60a85c9b4771034e6370bf8"} {"level":"debug","ts":"2026-07-27T21:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df6dc1fca31d224913aba2ebd668fdc2c70d7e99a60a85c9b4771034e6370bf8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:41:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:41:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df6dc1fca31d224913aba2ebd668fdc2c70d7e99a60a85c9b4771034e6370bf8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df6dc1fca31d224913aba2ebd668fdc2c70d7e99a60a85c9b4771034e6370bf8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df6dc1fca31d224913aba2ebd668fdc2c70d7e99a60a85c9b4771034e6370bf8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df6dc1fca31d224913aba2ebd668fdc2c70d7e99a60a85c9b4771034e6370bf8"} {"level":"debug","ts":"2026-07-27T21:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"977e828d14dc64dcd4fcffc338a668e22c0fce0ce83dfb061a57818981135491","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:41:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:41:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/977e828d14dc64dcd4fcffc338a668e22c0fce0ce83dfb061a57818981135491"} {"level":"info","ts":"2026-07-27T21:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"977e828d14dc64dcd4fcffc338a668e22c0fce0ce83dfb061a57818981135491","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"977e828d14dc64dcd4fcffc338a668e22c0fce0ce83dfb061a57818981135491","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"977e828d14dc64dcd4fcffc338a668e22c0fce0ce83dfb061a57818981135491","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/977e828d14dc64dcd4fcffc338a668e22c0fce0ce83dfb061a57818981135491"} {"level":"debug","ts":"2026-07-27T21:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"977e828d14dc64dcd4fcffc338a668e22c0fce0ce83dfb061a57818981135491","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:41:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:41:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["977e828d14dc64dcd4fcffc338a668e22c0fce0ce83dfb061a57818981135491"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"977e828d14dc64dcd4fcffc338a668e22c0fce0ce83dfb061a57818981135491","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"977e828d14dc64dcd4fcffc338a668e22c0fce0ce83dfb061a57818981135491","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:41:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:41:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"977e828d14dc64dcd4fcffc338a668e22c0fce0ce83dfb061a57818981135491","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"977e828d14dc64dcd4fcffc338a668e22c0fce0ce83dfb061a57818981135491","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"860affe0ef6a1f925657f11cebb5f9d245cd7379c9f7dcac9c89c0c72b673fc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:41:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:41:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/977e828d14dc64dcd4fcffc338a668e22c0fce0ce83dfb061a57818981135491"} {"level":"info","ts":"2026-07-27T21:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"860affe0ef6a1f925657f11cebb5f9d245cd7379c9f7dcac9c89c0c72b673fc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"977e828d14dc64dcd4fcffc338a668e22c0fce0ce83dfb061a57818981135491","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:41:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:41:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["977e828d14dc64dcd4fcffc338a668e22c0fce0ce83dfb061a57818981135491"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/860affe0ef6a1f925657f11cebb5f9d245cd7379c9f7dcac9c89c0c72b673fc5"} {"level":"info","ts":"2026-07-27T21:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"977e828d14dc64dcd4fcffc338a668e22c0fce0ce83dfb061a57818981135491","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"860affe0ef6a1f925657f11cebb5f9d245cd7379c9f7dcac9c89c0c72b673fc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:41:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:41:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["860affe0ef6a1f925657f11cebb5f9d245cd7379c9f7dcac9c89c0c72b673fc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/977e828d14dc64dcd4fcffc338a668e22c0fce0ce83dfb061a57818981135491"} {"level":"info","ts":"2026-07-27T21:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"860affe0ef6a1f925657f11cebb5f9d245cd7379c9f7dcac9c89c0c72b673fc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"977e828d14dc64dcd4fcffc338a668e22c0fce0ce83dfb061a57818981135491","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"860affe0ef6a1f925657f11cebb5f9d245cd7379c9f7dcac9c89c0c72b673fc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:41:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:41:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"860affe0ef6a1f925657f11cebb5f9d245cd7379c9f7dcac9c89c0c72b673fc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"860affe0ef6a1f925657f11cebb5f9d245cd7379c9f7dcac9c89c0c72b673fc5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/860affe0ef6a1f925657f11cebb5f9d245cd7379c9f7dcac9c89c0c72b673fc5"} {"level":"debug","ts":"2026-07-27T21:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"860affe0ef6a1f925657f11cebb5f9d245cd7379c9f7dcac9c89c0c72b673fc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:41:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:41:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["860affe0ef6a1f925657f11cebb5f9d245cd7379c9f7dcac9c89c0c72b673fc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"860affe0ef6a1f925657f11cebb5f9d245cd7379c9f7dcac9c89c0c72b673fc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"860affe0ef6a1f925657f11cebb5f9d245cd7379c9f7dcac9c89c0c72b673fc5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/977e828d14dc64dcd4fcffc338a668e22c0fce0ce83dfb061a57818981135491"} {"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/860affe0ef6a1f925657f11cebb5f9d245cd7379c9f7dcac9c89c0c72b673fc5"} {"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6d9c0917371bf1418b7573d9045d20af437387849ef550505c74df2cbb16aec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6d9c0917371bf1418b7573d9045d20af437387849ef550505c74df2cbb16aec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6d9c0917371bf1418b7573d9045d20af437387849ef550505c74df2cbb16aec","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6d9c0917371bf1418b7573d9045d20af437387849ef550505c74df2cbb16aec"} {"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6d9c0917371bf1418b7573d9045d20af437387849ef550505c74df2cbb16aec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6d9c0917371bf1418b7573d9045d20af437387849ef550505c74df2cbb16aec","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6d9c0917371bf1418b7573d9045d20af437387849ef550505c74df2cbb16aec"} {"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6d9c0917371bf1418b7573d9045d20af437387849ef550505c74df2cbb16aec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6d9c0917371bf1418b7573d9045d20af437387849ef550505c74df2cbb16aec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6d9c0917371bf1418b7573d9045d20af437387849ef550505c74df2cbb16aec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6d9c0917371bf1418b7573d9045d20af437387849ef550505c74df2cbb16aec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6d9c0917371bf1418b7573d9045d20af437387849ef550505c74df2cbb16aec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6d9c0917371bf1418b7573d9045d20af437387849ef550505c74df2cbb16aec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6d9c0917371bf1418b7573d9045d20af437387849ef550505c74df2cbb16aec","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6d9c0917371bf1418b7573d9045d20af437387849ef550505c74df2cbb16aec"} {"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6d9c0917371bf1418b7573d9045d20af437387849ef550505c74df2cbb16aec","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6d9c0917371bf1418b7573d9045d20af437387849ef550505c74df2cbb16aec"} {"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6d9c0917371bf1418b7573d9045d20af437387849ef550505c74df2cbb16aec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6d9c0917371bf1418b7573d9045d20af437387849ef550505c74df2cbb16aec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6d9c0917371bf1418b7573d9045d20af437387849ef550505c74df2cbb16aec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9beb5e51c413086060d302e9c03c27dee62cab12ffa587f052b84bf5ffbc0e9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9beb5e51c413086060d302e9c03c27dee62cab12ffa587f052b84bf5ffbc0e9c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6d9c0917371bf1418b7573d9045d20af437387849ef550505c74df2cbb16aec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9beb5e51c413086060d302e9c03c27dee62cab12ffa587f052b84bf5ffbc0e9c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9beb5e51c413086060d302e9c03c27dee62cab12ffa587f052b84bf5ffbc0e9c"} {"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9beb5e51c413086060d302e9c03c27dee62cab12ffa587f052b84bf5ffbc0e9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9beb5e51c413086060d302e9c03c27dee62cab12ffa587f052b84bf5ffbc0e9c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9beb5e51c413086060d302e9c03c27dee62cab12ffa587f052b84bf5ffbc0e9c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9beb5e51c413086060d302e9c03c27dee62cab12ffa587f052b84bf5ffbc0e9c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6d9c0917371bf1418b7573d9045d20af437387849ef550505c74df2cbb16aec"} {"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9beb5e51c413086060d302e9c03c27dee62cab12ffa587f052b84bf5ffbc0e9c"} {"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f9f30257f57ee0c01552230b0cf60e1053edbcbe7139c81df804068b1fd45e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f9f30257f57ee0c01552230b0cf60e1053edbcbe7139c81df804068b1fd45e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f9f30257f57ee0c01552230b0cf60e1053edbcbe7139c81df804068b1fd45e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f9f30257f57ee0c01552230b0cf60e1053edbcbe7139c81df804068b1fd45e1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f9f30257f57ee0c01552230b0cf60e1053edbcbe7139c81df804068b1fd45e1"} {"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f9f30257f57ee0c01552230b0cf60e1053edbcbe7139c81df804068b1fd45e1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f9f30257f57ee0c01552230b0cf60e1053edbcbe7139c81df804068b1fd45e1"} {"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f9f30257f57ee0c01552230b0cf60e1053edbcbe7139c81df804068b1fd45e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f9f30257f57ee0c01552230b0cf60e1053edbcbe7139c81df804068b1fd45e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f9f30257f57ee0c01552230b0cf60e1053edbcbe7139c81df804068b1fd45e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49fabfd88981a76c32013f4e185e7fd33c767b8fae5905442170681fa1ca954e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49fabfd88981a76c32013f4e185e7fd33c767b8fae5905442170681fa1ca954e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f9f30257f57ee0c01552230b0cf60e1053edbcbe7139c81df804068b1fd45e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"205e8156d23957abd2c11dc5b6c33befe0238fde064a5cadb9d05f2a3ea4ab84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49fabfd88981a76c32013f4e185e7fd33c767b8fae5905442170681fa1ca954e"} {"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"205e8156d23957abd2c11dc5b6c33befe0238fde064a5cadb9d05f2a3ea4ab84","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49fabfd88981a76c32013f4e185e7fd33c767b8fae5905442170681fa1ca954e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["49fabfd88981a76c32013f4e185e7fd33c767b8fae5905442170681fa1ca954e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49fabfd88981a76c32013f4e185e7fd33c767b8fae5905442170681fa1ca954e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"205e8156d23957abd2c11dc5b6c33befe0238fde064a5cadb9d05f2a3ea4ab84","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49fabfd88981a76c32013f4e185e7fd33c767b8fae5905442170681fa1ca954e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f9f30257f57ee0c01552230b0cf60e1053edbcbe7139c81df804068b1fd45e1"} {"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"205e8156d23957abd2c11dc5b6c33befe0238fde064a5cadb9d05f2a3ea4ab84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"205e8156d23957abd2c11dc5b6c33befe0238fde064a5cadb9d05f2a3ea4ab84","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"205e8156d23957abd2c11dc5b6c33befe0238fde064a5cadb9d05f2a3ea4ab84","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/205e8156d23957abd2c11dc5b6c33befe0238fde064a5cadb9d05f2a3ea4ab84"} {"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"205e8156d23957abd2c11dc5b6c33befe0238fde064a5cadb9d05f2a3ea4ab84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["205e8156d23957abd2c11dc5b6c33befe0238fde064a5cadb9d05f2a3ea4ab84"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49fabfd88981a76c32013f4e185e7fd33c767b8fae5905442170681fa1ca954e"} {"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"205e8156d23957abd2c11dc5b6c33befe0238fde064a5cadb9d05f2a3ea4ab84","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b41b948d79098aced20b595c344e0e8f41c911a79cd4ef88cc2856d106d62635","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b41b948d79098aced20b595c344e0e8f41c911a79cd4ef88cc2856d106d62635","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"205e8156d23957abd2c11dc5b6c33befe0238fde064a5cadb9d05f2a3ea4ab84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"205e8156d23957abd2c11dc5b6c33befe0238fde064a5cadb9d05f2a3ea4ab84","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"153be2abadb1ae25651660c31305a530fce9d79e92d016e097720eddb979a0e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/205e8156d23957abd2c11dc5b6c33befe0238fde064a5cadb9d05f2a3ea4ab84"} {"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"153be2abadb1ae25651660c31305a530fce9d79e92d016e097720eddb979a0e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b41b948d79098aced20b595c344e0e8f41c911a79cd4ef88cc2856d106d62635","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b41b948d79098aced20b595c344e0e8f41c911a79cd4ef88cc2856d106d62635","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"205e8156d23957abd2c11dc5b6c33befe0238fde064a5cadb9d05f2a3ea4ab84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["205e8156d23957abd2c11dc5b6c33befe0238fde064a5cadb9d05f2a3ea4ab84"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b41b948d79098aced20b595c344e0e8f41c911a79cd4ef88cc2856d106d62635"} {"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"205e8156d23957abd2c11dc5b6c33befe0238fde064a5cadb9d05f2a3ea4ab84","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"153be2abadb1ae25651660c31305a530fce9d79e92d016e097720eddb979a0e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"153be2abadb1ae25651660c31305a530fce9d79e92d016e097720eddb979a0e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b41b948d79098aced20b595c344e0e8f41c911a79cd4ef88cc2856d106d62635","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b41b948d79098aced20b595c344e0e8f41c911a79cd4ef88cc2856d106d62635"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/153be2abadb1ae25651660c31305a530fce9d79e92d016e097720eddb979a0e5"} {"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b41b948d79098aced20b595c344e0e8f41c911a79cd4ef88cc2856d106d62635","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"205e8156d23957abd2c11dc5b6c33befe0238fde064a5cadb9d05f2a3ea4ab84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"205e8156d23957abd2c11dc5b6c33befe0238fde064a5cadb9d05f2a3ea4ab84","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"153be2abadb1ae25651660c31305a530fce9d79e92d016e097720eddb979a0e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["153be2abadb1ae25651660c31305a530fce9d79e92d016e097720eddb979a0e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"153be2abadb1ae25651660c31305a530fce9d79e92d016e097720eddb979a0e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b41b948d79098aced20b595c344e0e8f41c911a79cd4ef88cc2856d106d62635","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"205e8156d23957abd2c11dc5b6c33befe0238fde064a5cadb9d05f2a3ea4ab84","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"153be2abadb1ae25651660c31305a530fce9d79e92d016e097720eddb979a0e5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/205e8156d23957abd2c11dc5b6c33befe0238fde064a5cadb9d05f2a3ea4ab84"} {"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"205e8156d23957abd2c11dc5b6c33befe0238fde064a5cadb9d05f2a3ea4ab84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["205e8156d23957abd2c11dc5b6c33befe0238fde064a5cadb9d05f2a3ea4ab84"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"205e8156d23957abd2c11dc5b6c33befe0238fde064a5cadb9d05f2a3ea4ab84","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"205e8156d23957abd2c11dc5b6c33befe0238fde064a5cadb9d05f2a3ea4ab84","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b41b948d79098aced20b595c344e0e8f41c911a79cd4ef88cc2856d106d62635"} {"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f49e494ec7c0b098c456c3719fe2f39c32d66fe02c4d948c76d21eac58087a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f49e494ec7c0b098c456c3719fe2f39c32d66fe02c4d948c76d21eac58087a4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/153be2abadb1ae25651660c31305a530fce9d79e92d016e097720eddb979a0e5"} {"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f49e494ec7c0b098c456c3719fe2f39c32d66fe02c4d948c76d21eac58087a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88c907a981ab2402f31e6620a4bfa3823742b34b0a577628345d13ee1c9843a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88c907a981ab2402f31e6620a4bfa3823742b34b0a577628345d13ee1c9843a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f49e494ec7c0b098c456c3719fe2f39c32d66fe02c4d948c76d21eac58087a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88c907a981ab2402f31e6620a4bfa3823742b34b0a577628345d13ee1c9843a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88c907a981ab2402f31e6620a4bfa3823742b34b0a577628345d13ee1c9843a9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/205e8156d23957abd2c11dc5b6c33befe0238fde064a5cadb9d05f2a3ea4ab84"} {"level":"debug","ts":"2026-07-27T21:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f49e494ec7c0b098c456c3719fe2f39c32d66fe02c4d948c76d21eac58087a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:41:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f49e494ec7c0b098c456c3719fe2f39c32d66fe02c4d948c76d21eac58087a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88c907a981ab2402f31e6620a4bfa3823742b34b0a577628345d13ee1c9843a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f49e494ec7c0b098c456c3719fe2f39c32d66fe02c4d948c76d21eac58087a4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f49e494ec7c0b098c456c3719fe2f39c32d66fe02c4d948c76d21eac58087a4"} {"level":"debug","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f49e494ec7c0b098c456c3719fe2f39c32d66fe02c4d948c76d21eac58087a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:41:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:41:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f49e494ec7c0b098c456c3719fe2f39c32d66fe02c4d948c76d21eac58087a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88c907a981ab2402f31e6620a4bfa3823742b34b0a577628345d13ee1c9843a9"} {"level":"info","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f49e494ec7c0b098c456c3719fe2f39c32d66fe02c4d948c76d21eac58087a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88c907a981ab2402f31e6620a4bfa3823742b34b0a577628345d13ee1c9843a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:41:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:41:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88c907a981ab2402f31e6620a4bfa3823742b34b0a577628345d13ee1c9843a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f49e494ec7c0b098c456c3719fe2f39c32d66fe02c4d948c76d21eac58087a4"} {"level":"info","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88c907a981ab2402f31e6620a4bfa3823742b34b0a577628345d13ee1c9843a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f49e494ec7c0b098c456c3719fe2f39c32d66fe02c4d948c76d21eac58087a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:41:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:41:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f49e494ec7c0b098c456c3719fe2f39c32d66fe02c4d948c76d21eac58087a4"} {"level":"info","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f49e494ec7c0b098c456c3719fe2f39c32d66fe02c4d948c76d21eac58087a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88c907a981ab2402f31e6620a4bfa3823742b34b0a577628345d13ee1c9843a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:41:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:41:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88c907a981ab2402f31e6620a4bfa3823742b34b0a577628345d13ee1c9843a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f49e494ec7c0b098c456c3719fe2f39c32d66fe02c4d948c76d21eac58087a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:41:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:41:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f49e494ec7c0b098c456c3719fe2f39c32d66fe02c4d948c76d21eac58087a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88c907a981ab2402f31e6620a4bfa3823742b34b0a577628345d13ee1c9843a9"} {"level":"info","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f49e494ec7c0b098c456c3719fe2f39c32d66fe02c4d948c76d21eac58087a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88c907a981ab2402f31e6620a4bfa3823742b34b0a577628345d13ee1c9843a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:41:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:41:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88c907a981ab2402f31e6620a4bfa3823742b34b0a577628345d13ee1c9843a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f49e494ec7c0b098c456c3719fe2f39c32d66fe02c4d948c76d21eac58087a4"} {"level":"info","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88c907a981ab2402f31e6620a4bfa3823742b34b0a577628345d13ee1c9843a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f49e494ec7c0b098c456c3719fe2f39c32d66fe02c4d948c76d21eac58087a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88c907a981ab2402f31e6620a4bfa3823742b34b0a577628345d13ee1c9843a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:41:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:41:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88c907a981ab2402f31e6620a4bfa3823742b34b0a577628345d13ee1c9843a9"} {"level":"info","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88c907a981ab2402f31e6620a4bfa3823742b34b0a577628345d13ee1c9843a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88c907a981ab2402f31e6620a4bfa3823742b34b0a577628345d13ee1c9843a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:41:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:41:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88c907a981ab2402f31e6620a4bfa3823742b34b0a577628345d13ee1c9843a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f49e494ec7c0b098c456c3719fe2f39c32d66fe02c4d948c76d21eac58087a4"} {"level":"info","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88c907a981ab2402f31e6620a4bfa3823742b34b0a577628345d13ee1c9843a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88c907a981ab2402f31e6620a4bfa3823742b34b0a577628345d13ee1c9843a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88c907a981ab2402f31e6620a4bfa3823742b34b0a577628345d13ee1c9843a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:41:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:41:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88c907a981ab2402f31e6620a4bfa3823742b34b0a577628345d13ee1c9843a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88c907a981ab2402f31e6620a4bfa3823742b34b0a577628345d13ee1c9843a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T21:41:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T21:41:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88c907a981ab2402f31e6620a4bfa3823742b34b0a577628345d13ee1c9843a9"} {"level":"error","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"88c907a981ab2402f31e6620a4bfa3823742b34b0a577628345d13ee1c9843a9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"88c907a981ab2402f31e6620a4bfa3823742b34b0a577628345d13ee1c9843a9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88c907a981ab2402f31e6620a4bfa3823742b34b0a577628345d13ee1c9843a9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88c907a981ab2402f31e6620a4bfa3823742b34b0a577628345d13ee1c9843a9"} {"level":"debug","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88c907a981ab2402f31e6620a4bfa3823742b34b0a577628345d13ee1c9843a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T21:41:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T21:41:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88c907a981ab2402f31e6620a4bfa3823742b34b0a577628345d13ee1c9843a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88c907a981ab2402f31e6620a4bfa3823742b34b0a577628345d13ee1c9843a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88c907a981ab2402f31e6620a4bfa3823742b34b0a577628345d13ee1c9843a9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-27T21:41:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88c907a981ab2402f31e6620a4bfa3823742b34b0a577628345d13ee1c9843a9"} {"level":"info","ts":"2026-07-27T21:41:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fe15f78c-a267-4271-bc23-ae46591b8677","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:49038","PortSpecifier":{"PortValue":49038}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fe15f78c-a267-4271-bc23-ae46591b8677","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-5d8041.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T21:41:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fe15f78c-a267-4271-bc23-ae46591b8677","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:49038","PortSpecifier":{"PortValue":49038}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785188491,"nanos":660635759},"http":{"id":"fe15f78c-a267-4271-bc23-ae46591b8677","method":"POST","headers":{":authority":"e2e-ipp-a-5d8041.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T21:41:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fe15f78c-a267-4271-bc23-ae46591b8677","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-27T21:41:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fe15f78c-a267-4271-bc23-ae46591b8677","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"cbd7f247-ea90-43d8-8ce3-e28a2a121794","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6ac1e77f-7df8-4dea-ab0c-bf8d022a6519"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa88232987eb"]}} {"level":"debug","ts":"2026-07-27T21:41:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fe15f78c-a267-4271-bc23-ae46591b8677","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/aa88232987eb"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6ac1e77f-7df8-4dea-ab0c-bf8d022a6519"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"cbd7f247-ea90-43d8-8ce3-e28a2a121794","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"977e828d14dc64dcd4fcffc338a668e22c0fce0ce83dfb061a57818981135491"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-5d8041.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T21:41:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe15f78c-a267-4271-bc23-ae46591b8677","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:41:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe15f78c-a267-4271-bc23-ae46591b8677","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:41:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe15f78c-a267-4271-bc23-ae46591b8677","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-5d8041/ipp-route-5d8041\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-5d8041/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:41:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fe15f78c-a267-4271-bc23-ae46591b8677","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-27T21:41:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe15f78c-a267-4271-bc23-ae46591b8677","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-27T21:41:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe15f78c-a267-4271-bc23-ae46591b8677","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-27T21:41:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fe15f78c-a267-4271-bc23-ae46591b8677","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T21:41:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fe15f78c-a267-4271-bc23-ae46591b8677","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T21:41:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b10c7cf9-db21-447b-a143-07a0b740adef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:49046","PortSpecifier":{"PortValue":49046}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b10c7cf9-db21-447b-a143-07a0b740adef","method":"POST","path":"/ai-tenant-e2e-ipp-a-5d8041/ipp-route-5d8041/v1/chat/completions","host":"e2e-ipp-a-5d8041.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-27T21:41:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b10c7cf9-db21-447b-a143-07a0b740adef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:49046","PortSpecifier":{"PortValue":49046}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785188493,"nanos":723444589},"http":{"id":"b10c7cf9-db21-447b-a143-07a0b740adef","method":"POST","headers":{":authority":"e2e-ipp-a-5d8041.apps.238ba9d5-f1ea-40be-a83d-aa88232987eb.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-5d8041/ipp-route-5d8041/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T21:41:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b10c7cf9-db21-447b-a143-07a0b740adef","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-XN1fRiO03ZhDNIv1_fpnoMZhmTKwG592BL70K3M8NX7bhGZoadVVSk87I7VI"} {"level":"debug","ts":"2026-07-27T21:41:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b10c7cf9-db21-447b-a143-07a0b740adef","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-5d8041.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-XN1fRiO03ZhDNIv1_fpnoMZhmTKwG592BL70K3M8NX7bhGZoadVVSk87I7VI\"}"} {"level":"debug","ts":"2026-07-27T21:41:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b10c7cf9-db21-447b-a143-07a0b740adef","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-5d8041.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cc0064b3-2b73-455d-9e61-6a7c885a12c2","keyName":"e2e-ipp-5d8041","subscription":"ipp-route-5d8041-sub","tenant":"e2e-ipp-a-5d8041","userId":"cc0064b3-2b73-455d-9e61-6a7c885a12c2","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-27T21:41:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b10c7cf9-db21-447b-a143-07a0b740adef","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-5d8041.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-ipp-a-5d8041/ipp-route-5d8041\",\"requestedSubscription\":\"ipp-route-5d8041-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-27T21:41:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b10c7cf9-db21-447b-a143-07a0b740adef","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-5d8041.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-5d8041/models/facebook/opt-125m","name":"ipp-route-5d8041","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-5d8041-sub","namespace":"ai-tenant-e2e-ipp-a-5d8041","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-5d8041/ipp-route-5d8041"}} {"level":"debug","ts":"2026-07-27T21:41:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b10c7cf9-db21-447b-a143-07a0b740adef","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-27T21:41:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b10c7cf9-db21-447b-a143-07a0b740adef","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:41:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b10c7cf9-db21-447b-a143-07a0b740adef","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:41:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b10c7cf9-db21-447b-a143-07a0b740adef","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-5d8041/ipp-route-5d8041\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-5d8041/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:41:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b10c7cf9-db21-447b-a143-07a0b740adef","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-27T21:41:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b10c7cf9-db21-447b-a143-07a0b740adef","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-27T21:41:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b10c7cf9-db21-447b-a143-07a0b740adef","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-5d8041-sub"} {"level":"debug","ts":"2026-07-27T21:41:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b10c7cf9-db21-447b-a143-07a0b740adef","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-27T21:41:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b10c7cf9-db21-447b-a143-07a0b740adef","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"cc0064b3-2b73-455d-9e61-6a7c885a12c2","keyName":"e2e-ipp-5d8041","selected_subscription":"ipp-route-5d8041-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-5d8041/ipp-route-5d8041-sub@ai-tenant-e2e-ipp-a-5d8041/ipp-route-5d8041","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-5d8041/models/facebook/opt-125m","name":"ipp-route-5d8041","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-5d8041-sub","namespace":"ai-tenant-e2e-ipp-a-5d8041","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-5d8041/ipp-route-5d8041"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-27T21:41:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b10c7cf9-db21-447b-a143-07a0b740adef","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-27T21:41:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b10c7cf9-db21-447b-a143-07a0b740adef","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-27T21:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b41b948d79098aced20b595c344e0e8f41c911a79cd4ef88cc2856d106d62635"} {"level":"info","ts":"2026-07-27T21:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9beb5e51c413086060d302e9c03c27dee62cab12ffa587f052b84bf5ffbc0e9c"} {"level":"info","ts":"2026-07-27T21:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/860affe0ef6a1f925657f11cebb5f9d245cd7379c9f7dcac9c89c0c72b673fc5"} {"level":"info","ts":"2026-07-27T21:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7f49e494ec7c0b098c456c3719fe2f39c32d66fe02c4d948c76d21eac58087a4"} {"level":"info","ts":"2026-07-27T21:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6f9f30257f57ee0c01552230b0cf60e1053edbcbe7139c81df804068b1fd45e1"} {"level":"info","ts":"2026-07-27T21:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/df6dc1fca31d224913aba2ebd668fdc2c70d7e99a60a85c9b4771034e6370bf8"} {"level":"info","ts":"2026-07-27T21:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/88c907a981ab2402f31e6620a4bfa3823742b34b0a577628345d13ee1c9843a9"} {"level":"info","ts":"2026-07-27T21:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/205e8156d23957abd2c11dc5b6c33befe0238fde064a5cadb9d05f2a3ea4ab84"} {"level":"info","ts":"2026-07-27T21:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/153be2abadb1ae25651660c31305a530fce9d79e92d016e097720eddb979a0e5"} {"level":"info","ts":"2026-07-27T21:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e6d9c0917371bf1418b7573d9045d20af437387849ef550505c74df2cbb16aec"} {"level":"info","ts":"2026-07-27T21:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/49fabfd88981a76c32013f4e185e7fd33c767b8fae5905442170681fa1ca954e"} {"level":"info","ts":"2026-07-27T21:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/977e828d14dc64dcd4fcffc338a668e22c0fce0ce83dfb061a57818981135491"}