--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"debug","ts":"2026-07-15T14:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"536019c7cc2774683a1e4a5d3045d2281d80a5c4148e541f3f071278cf43ab1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:08:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:08:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["536019c7cc2774683a1e4a5d3045d2281d80a5c4148e541f3f071278cf43ab1e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7e22f7252ec2c14a461218c1adce05028b4b6af86a033900e92c24747220094"} {"level":"info","ts":"2026-07-15T14:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"536019c7cc2774683a1e4a5d3045d2281d80a5c4148e541f3f071278cf43ab1e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7e22f7252ec2c14a461218c1adce05028b4b6af86a033900e92c24747220094","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:08:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:08:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7e22f7252ec2c14a461218c1adce05028b4b6af86a033900e92c24747220094"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6ba09f28ede629d880b76ad2849e01492f565a74cbf34611eac377fb4ab5ddc"} {"level":"info","ts":"2026-07-15T14:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7e22f7252ec2c14a461218c1adce05028b4b6af86a033900e92c24747220094","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6ba09f28ede629d880b76ad2849e01492f565a74cbf34611eac377fb4ab5ddc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"536019c7cc2774683a1e4a5d3045d2281d80a5c4148e541f3f071278cf43ab1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:08:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/536019c7cc2774683a1e4a5d3045d2281d80a5c4148e541f3f071278cf43ab1e"} {"level":"info","ts":"2026-07-15T14:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"536019c7cc2774683a1e4a5d3045d2281d80a5c4148e541f3f071278cf43ab1e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7e22f7252ec2c14a461218c1adce05028b4b6af86a033900e92c24747220094","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:08:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7e22f7252ec2c14a461218c1adce05028b4b6af86a033900e92c24747220094"} {"level":"info","ts":"2026-07-15T14:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7e22f7252ec2c14a461218c1adce05028b4b6af86a033900e92c24747220094","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"536019c7cc2774683a1e4a5d3045d2281d80a5c4148e541f3f071278cf43ab1e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7e22f7252ec2c14a461218c1adce05028b4b6af86a033900e92c24747220094","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:08:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:08:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7e22f7252ec2c14a461218c1adce05028b4b6af86a033900e92c24747220094"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7e22f7252ec2c14a461218c1adce05028b4b6af86a033900e92c24747220094","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"536019c7cc2774683a1e4a5d3045d2281d80a5c4148e541f3f071278cf43ab1e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7e22f7252ec2c14a461218c1adce05028b4b6af86a033900e92c24747220094","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:08:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:08:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7e22f7252ec2c14a461218c1adce05028b4b6af86a033900e92c24747220094"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/536019c7cc2774683a1e4a5d3045d2281d80a5c4148e541f3f071278cf43ab1e"} {"level":"error","ts":"2026-07-15T14:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f7e22f7252ec2c14a461218c1adce05028b4b6af86a033900e92c24747220094","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f7e22f7252ec2c14a461218c1adce05028b4b6af86a033900e92c24747220094\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T14:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7e22f7252ec2c14a461218c1adce05028b4b6af86a033900e92c24747220094","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:08:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7e22f7252ec2c14a461218c1adce05028b4b6af86a033900e92c24747220094"} {"level":"info","ts":"2026-07-15T14:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7e22f7252ec2c14a461218c1adce05028b4b6af86a033900e92c24747220094","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"536019c7cc2774683a1e4a5d3045d2281d80a5c4148e541f3f071278cf43ab1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:08:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:08:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["536019c7cc2774683a1e4a5d3045d2281d80a5c4148e541f3f071278cf43ab1e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"536019c7cc2774683a1e4a5d3045d2281d80a5c4148e541f3f071278cf43ab1e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7e22f7252ec2c14a461218c1adce05028b4b6af86a033900e92c24747220094","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"536019c7cc2774683a1e4a5d3045d2281d80a5c4148e541f3f071278cf43ab1e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7e22f7252ec2c14a461218c1adce05028b4b6af86a033900e92c24747220094"} {"level":"debug","ts":"2026-07-15T14:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7e22f7252ec2c14a461218c1adce05028b4b6af86a033900e92c24747220094","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:08:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:08:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7e22f7252ec2c14a461218c1adce05028b4b6af86a033900e92c24747220094"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/536019c7cc2774683a1e4a5d3045d2281d80a5c4148e541f3f071278cf43ab1e"} {"level":"info","ts":"2026-07-15T14:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7e22f7252ec2c14a461218c1adce05028b4b6af86a033900e92c24747220094","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7e22f7252ec2c14a461218c1adce05028b4b6af86a033900e92c24747220094","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:08:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:08:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7e22f7252ec2c14a461218c1adce05028b4b6af86a033900e92c24747220094","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7e22f7252ec2c14a461218c1adce05028b4b6af86a033900e92c24747220094","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7e22f7252ec2c14a461218c1adce05028b4b6af86a033900e92c24747220094","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7e22f7252ec2c14a461218c1adce05028b4b6af86a033900e92c24747220094"} {"level":"debug","ts":"2026-07-15T14:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7e22f7252ec2c14a461218c1adce05028b4b6af86a033900e92c24747220094","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7e22f7252ec2c14a461218c1adce05028b4b6af86a033900e92c24747220094"} {"level":"debug","ts":"2026-07-15T14:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7e22f7252ec2c14a461218c1adce05028b4b6af86a033900e92c24747220094","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:08:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:08:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7e22f7252ec2c14a461218c1adce05028b4b6af86a033900e92c24747220094"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7e22f7252ec2c14a461218c1adce05028b4b6af86a033900e92c24747220094","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7e22f7252ec2c14a461218c1adce05028b4b6af86a033900e92c24747220094","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:08:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7e22f7252ec2c14a461218c1adce05028b4b6af86a033900e92c24747220094"} {"level":"info","ts":"2026-07-15T14:09:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5a8396a122f5d322712298dc444f5947fd89ef7865dc80de3f78e38743c88912"} {"level":"info","ts":"2026-07-15T14:09:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/73ff3b38f2a3f55da9403b75e120ca6cc01c0b0e1fbf89f60c7914951dfb47ce"} {"level":"info","ts":"2026-07-15T14:09:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5c5e2576982281b7bd8f4e5f3132e9942898baf38630d43cfb61a532d8d73003"} {"level":"info","ts":"2026-07-15T14:09:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3e7619a989534e93a954993b8e1d0082215c7e02f0576840746083261c974a2f"} {"level":"info","ts":"2026-07-15T14:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f7e22f7252ec2c14a461218c1adce05028b4b6af86a033900e92c24747220094"} {"level":"info","ts":"2026-07-15T14:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f6ba09f28ede629d880b76ad2849e01492f565a74cbf34611eac377fb4ab5ddc"} {"level":"info","ts":"2026-07-15T14:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/536019c7cc2774683a1e4a5d3045d2281d80a5c4148e541f3f071278cf43ab1e"} {"level":"info","ts":"2026-07-15T14:09:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/50e980afcf7d503e2df4aeff17e2581e483cd4abb344e3412c1ba7b46e261b7a"} {"level":"debug","ts":"2026-07-15T14:11:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2535aaf092aa6a5180be482c651366ddd6d080fcfe691c11d5a94d5412eda107","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:11:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:11:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2535aaf092aa6a5180be482c651366ddd6d080fcfe691c11d5a94d5412eda107","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2535aaf092aa6a5180be482c651366ddd6d080fcfe691c11d5a94d5412eda107","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2535aaf092aa6a5180be482c651366ddd6d080fcfe691c11d5a94d5412eda107","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:11:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2535aaf092aa6a5180be482c651366ddd6d080fcfe691c11d5a94d5412eda107"} {"level":"debug","ts":"2026-07-15T14:11:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2535aaf092aa6a5180be482c651366ddd6d080fcfe691c11d5a94d5412eda107","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:11:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2535aaf092aa6a5180be482c651366ddd6d080fcfe691c11d5a94d5412eda107"} {"level":"debug","ts":"2026-07-15T14:11:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2535aaf092aa6a5180be482c651366ddd6d080fcfe691c11d5a94d5412eda107","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:11:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:11:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2535aaf092aa6a5180be482c651366ddd6d080fcfe691c11d5a94d5412eda107"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2535aaf092aa6a5180be482c651366ddd6d080fcfe691c11d5a94d5412eda107","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2535aaf092aa6a5180be482c651366ddd6d080fcfe691c11d5a94d5412eda107","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:11:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2535aaf092aa6a5180be482c651366ddd6d080fcfe691c11d5a94d5412eda107"} {"level":"debug","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b005819587b0d66ebb98eab9eaf5bde4f787c113fbc26a70f4df91d2a82b1f7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:11:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:11:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b005819587b0d66ebb98eab9eaf5bde4f787c113fbc26a70f4df91d2a82b1f7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b005819587b0d66ebb98eab9eaf5bde4f787c113fbc26a70f4df91d2a82b1f7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b005819587b0d66ebb98eab9eaf5bde4f787c113fbc26a70f4df91d2a82b1f7d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b005819587b0d66ebb98eab9eaf5bde4f787c113fbc26a70f4df91d2a82b1f7d"} {"level":"debug","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b005819587b0d66ebb98eab9eaf5bde4f787c113fbc26a70f4df91d2a82b1f7d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b005819587b0d66ebb98eab9eaf5bde4f787c113fbc26a70f4df91d2a82b1f7d"} {"level":"debug","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b005819587b0d66ebb98eab9eaf5bde4f787c113fbc26a70f4df91d2a82b1f7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:11:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:11:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b005819587b0d66ebb98eab9eaf5bde4f787c113fbc26a70f4df91d2a82b1f7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b005819587b0d66ebb98eab9eaf5bde4f787c113fbc26a70f4df91d2a82b1f7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b005819587b0d66ebb98eab9eaf5bde4f787c113fbc26a70f4df91d2a82b1f7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:11:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:11:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b005819587b0d66ebb98eab9eaf5bde4f787c113fbc26a70f4df91d2a82b1f7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b790b875dd5bde0f5ff12f34c16e551ea9994d5949c6a4f01c475bd1b8860a82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:11:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:11:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b005819587b0d66ebb98eab9eaf5bde4f787c113fbc26a70f4df91d2a82b1f7d"} {"level":"info","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b790b875dd5bde0f5ff12f34c16e551ea9994d5949c6a4f01c475bd1b8860a82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b005819587b0d66ebb98eab9eaf5bde4f787c113fbc26a70f4df91d2a82b1f7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:11:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:11:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b005819587b0d66ebb98eab9eaf5bde4f787c113fbc26a70f4df91d2a82b1f7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b790b875dd5bde0f5ff12f34c16e551ea9994d5949c6a4f01c475bd1b8860a82"} {"level":"info","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b005819587b0d66ebb98eab9eaf5bde4f787c113fbc26a70f4df91d2a82b1f7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b790b875dd5bde0f5ff12f34c16e551ea9994d5949c6a4f01c475bd1b8860a82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:11:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:11:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b790b875dd5bde0f5ff12f34c16e551ea9994d5949c6a4f01c475bd1b8860a82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b790b875dd5bde0f5ff12f34c16e551ea9994d5949c6a4f01c475bd1b8860a82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b005819587b0d66ebb98eab9eaf5bde4f787c113fbc26a70f4df91d2a82b1f7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:11:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:11:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b005819587b0d66ebb98eab9eaf5bde4f787c113fbc26a70f4df91d2a82b1f7d"} {"level":"info","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b005819587b0d66ebb98eab9eaf5bde4f787c113fbc26a70f4df91d2a82b1f7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b790b875dd5bde0f5ff12f34c16e551ea9994d5949c6a4f01c475bd1b8860a82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:11:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:11:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b790b875dd5bde0f5ff12f34c16e551ea9994d5949c6a4f01c475bd1b8860a82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b005819587b0d66ebb98eab9eaf5bde4f787c113fbc26a70f4df91d2a82b1f7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:11:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:11:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b005819587b0d66ebb98eab9eaf5bde4f787c113fbc26a70f4df91d2a82b1f7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b790b875dd5bde0f5ff12f34c16e551ea9994d5949c6a4f01c475bd1b8860a82"} {"level":"info","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b005819587b0d66ebb98eab9eaf5bde4f787c113fbc26a70f4df91d2a82b1f7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b790b875dd5bde0f5ff12f34c16e551ea9994d5949c6a4f01c475bd1b8860a82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:11:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:11:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b790b875dd5bde0f5ff12f34c16e551ea9994d5949c6a4f01c475bd1b8860a82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b005819587b0d66ebb98eab9eaf5bde4f787c113fbc26a70f4df91d2a82b1f7d"} {"level":"info","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b790b875dd5bde0f5ff12f34c16e551ea9994d5949c6a4f01c475bd1b8860a82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b005819587b0d66ebb98eab9eaf5bde4f787c113fbc26a70f4df91d2a82b1f7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e316c8bd3cc287c0980c2a2ae0e370031e5f506a08511b358664f124722155f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:11:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:11:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e316c8bd3cc287c0980c2a2ae0e370031e5f506a08511b358664f124722155f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b790b875dd5bde0f5ff12f34c16e551ea9994d5949c6a4f01c475bd1b8860a82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:11:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:11:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b790b875dd5bde0f5ff12f34c16e551ea9994d5949c6a4f01c475bd1b8860a82"} {"level":"info","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b790b875dd5bde0f5ff12f34c16e551ea9994d5949c6a4f01c475bd1b8860a82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e316c8bd3cc287c0980c2a2ae0e370031e5f506a08511b358664f124722155f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:11:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:11:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e316c8bd3cc287c0980c2a2ae0e370031e5f506a08511b358664f124722155f5"} {"level":"info","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b005819587b0d66ebb98eab9eaf5bde4f787c113fbc26a70f4df91d2a82b1f7d"} {"level":"info","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e316c8bd3cc287c0980c2a2ae0e370031e5f506a08511b358664f124722155f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b790b875dd5bde0f5ff12f34c16e551ea9994d5949c6a4f01c475bd1b8860a82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e316c8bd3cc287c0980c2a2ae0e370031e5f506a08511b358664f124722155f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:11:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:11:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e316c8bd3cc287c0980c2a2ae0e370031e5f506a08511b358664f124722155f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e316c8bd3cc287c0980c2a2ae0e370031e5f506a08511b358664f124722155f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b790b875dd5bde0f5ff12f34c16e551ea9994d5949c6a4f01c475bd1b8860a82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e316c8bd3cc287c0980c2a2ae0e370031e5f506a08511b358664f124722155f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:11:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:11:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e316c8bd3cc287c0980c2a2ae0e370031e5f506a08511b358664f124722155f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b790b875dd5bde0f5ff12f34c16e551ea9994d5949c6a4f01c475bd1b8860a82"} {"level":"error","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e316c8bd3cc287c0980c2a2ae0e370031e5f506a08511b358664f124722155f5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e316c8bd3cc287c0980c2a2ae0e370031e5f506a08511b358664f124722155f5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e316c8bd3cc287c0980c2a2ae0e370031e5f506a08511b358664f124722155f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:11:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:11:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e316c8bd3cc287c0980c2a2ae0e370031e5f506a08511b358664f124722155f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b790b875dd5bde0f5ff12f34c16e551ea9994d5949c6a4f01c475bd1b8860a82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:11:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:11:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b790b875dd5bde0f5ff12f34c16e551ea9994d5949c6a4f01c475bd1b8860a82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e316c8bd3cc287c0980c2a2ae0e370031e5f506a08511b358664f124722155f5"} {"level":"info","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b790b875dd5bde0f5ff12f34c16e551ea9994d5949c6a4f01c475bd1b8860a82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e316c8bd3cc287c0980c2a2ae0e370031e5f506a08511b358664f124722155f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b790b875dd5bde0f5ff12f34c16e551ea9994d5949c6a4f01c475bd1b8860a82","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e316c8bd3cc287c0980c2a2ae0e370031e5f506a08511b358664f124722155f5"} {"level":"debug","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e316c8bd3cc287c0980c2a2ae0e370031e5f506a08511b358664f124722155f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:11:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:11:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e316c8bd3cc287c0980c2a2ae0e370031e5f506a08511b358664f124722155f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b790b875dd5bde0f5ff12f34c16e551ea9994d5949c6a4f01c475bd1b8860a82"} {"level":"info","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e316c8bd3cc287c0980c2a2ae0e370031e5f506a08511b358664f124722155f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e316c8bd3cc287c0980c2a2ae0e370031e5f506a08511b358664f124722155f5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e316c8bd3cc287c0980c2a2ae0e370031e5f506a08511b358664f124722155f5"} {"level":"debug","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff179e4732cf79884a7b6312ea50fe28cb974a8ef36010597770932fc60798f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:11:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:11:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff179e4732cf79884a7b6312ea50fe28cb974a8ef36010597770932fc60798f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb19b113d034573d1f8cf25f53671ac5e3294d12971418ba7ba8f52c5509072d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:11:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:11:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff179e4732cf79884a7b6312ea50fe28cb974a8ef36010597770932fc60798f7"} {"level":"info","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb19b113d034573d1f8cf25f53671ac5e3294d12971418ba7ba8f52c5509072d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff179e4732cf79884a7b6312ea50fe28cb974a8ef36010597770932fc60798f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:11:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:11:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff179e4732cf79884a7b6312ea50fe28cb974a8ef36010597770932fc60798f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb19b113d034573d1f8cf25f53671ac5e3294d12971418ba7ba8f52c5509072d"} {"level":"info","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff179e4732cf79884a7b6312ea50fe28cb974a8ef36010597770932fc60798f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb19b113d034573d1f8cf25f53671ac5e3294d12971418ba7ba8f52c5509072d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:11:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:11:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb19b113d034573d1f8cf25f53671ac5e3294d12971418ba7ba8f52c5509072d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff179e4732cf79884a7b6312ea50fe28cb974a8ef36010597770932fc60798f7"} {"level":"info","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb19b113d034573d1f8cf25f53671ac5e3294d12971418ba7ba8f52c5509072d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff179e4732cf79884a7b6312ea50fe28cb974a8ef36010597770932fc60798f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb19b113d034573d1f8cf25f53671ac5e3294d12971418ba7ba8f52c5509072d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:11:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:11:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb19b113d034573d1f8cf25f53671ac5e3294d12971418ba7ba8f52c5509072d"} {"level":"info","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb19b113d034573d1f8cf25f53671ac5e3294d12971418ba7ba8f52c5509072d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb19b113d034573d1f8cf25f53671ac5e3294d12971418ba7ba8f52c5509072d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:11:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:11:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb19b113d034573d1f8cf25f53671ac5e3294d12971418ba7ba8f52c5509072d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb19b113d034573d1f8cf25f53671ac5e3294d12971418ba7ba8f52c5509072d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb19b113d034573d1f8cf25f53671ac5e3294d12971418ba7ba8f52c5509072d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:11:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:11:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb19b113d034573d1f8cf25f53671ac5e3294d12971418ba7ba8f52c5509072d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff179e4732cf79884a7b6312ea50fe28cb974a8ef36010597770932fc60798f7"} {"level":"error","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cb19b113d034573d1f8cf25f53671ac5e3294d12971418ba7ba8f52c5509072d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cb19b113d034573d1f8cf25f53671ac5e3294d12971418ba7ba8f52c5509072d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb19b113d034573d1f8cf25f53671ac5e3294d12971418ba7ba8f52c5509072d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:11:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:11:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb19b113d034573d1f8cf25f53671ac5e3294d12971418ba7ba8f52c5509072d"} {"level":"info","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb19b113d034573d1f8cf25f53671ac5e3294d12971418ba7ba8f52c5509072d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb19b113d034573d1f8cf25f53671ac5e3294d12971418ba7ba8f52c5509072d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb19b113d034573d1f8cf25f53671ac5e3294d12971418ba7ba8f52c5509072d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb19b113d034573d1f8cf25f53671ac5e3294d12971418ba7ba8f52c5509072d"} {"level":"debug","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb19b113d034573d1f8cf25f53671ac5e3294d12971418ba7ba8f52c5509072d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:11:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:11:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb19b113d034573d1f8cf25f53671ac5e3294d12971418ba7ba8f52c5509072d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb19b113d034573d1f8cf25f53671ac5e3294d12971418ba7ba8f52c5509072d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb19b113d034573d1f8cf25f53671ac5e3294d12971418ba7ba8f52c5509072d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:11:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:11:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb19b113d034573d1f8cf25f53671ac5e3294d12971418ba7ba8f52c5509072d"} {"level":"info","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb19b113d034573d1f8cf25f53671ac5e3294d12971418ba7ba8f52c5509072d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb19b113d034573d1f8cf25f53671ac5e3294d12971418ba7ba8f52c5509072d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:11:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:11:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb19b113d034573d1f8cf25f53671ac5e3294d12971418ba7ba8f52c5509072d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb19b113d034573d1f8cf25f53671ac5e3294d12971418ba7ba8f52c5509072d"} {"level":"info","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb19b113d034573d1f8cf25f53671ac5e3294d12971418ba7ba8f52c5509072d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb19b113d034573d1f8cf25f53671ac5e3294d12971418ba7ba8f52c5509072d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:11:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:11:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb19b113d034573d1f8cf25f53671ac5e3294d12971418ba7ba8f52c5509072d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cb19b113d034573d1f8cf25f53671ac5e3294d12971418ba7ba8f52c5509072d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cb19b113d034573d1f8cf25f53671ac5e3294d12971418ba7ba8f52c5509072d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb19b113d034573d1f8cf25f53671ac5e3294d12971418ba7ba8f52c5509072d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:11:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:11:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb19b113d034573d1f8cf25f53671ac5e3294d12971418ba7ba8f52c5509072d"} {"level":"info","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27b17c6fbaa2515ff97f3a2cbe3ff5f7ab2c48295e7120c7dd303b25c8bf4f65"} {"level":"info","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb19b113d034573d1f8cf25f53671ac5e3294d12971418ba7ba8f52c5509072d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27b17c6fbaa2515ff97f3a2cbe3ff5f7ab2c48295e7120c7dd303b25c8bf4f65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:11:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:11:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27b17c6fbaa2515ff97f3a2cbe3ff5f7ab2c48295e7120c7dd303b25c8bf4f65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27b17c6fbaa2515ff97f3a2cbe3ff5f7ab2c48295e7120c7dd303b25c8bf4f65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b67ceed084b093b589c455703a19cc242e0a3e5197dccc12cbf2efb918a593a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:11:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:11:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b67ceed084b093b589c455703a19cc242e0a3e5197dccc12cbf2efb918a593a6"} {"level":"info","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b67ceed084b093b589c455703a19cc242e0a3e5197dccc12cbf2efb918a593a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb19b113d034573d1f8cf25f53671ac5e3294d12971418ba7ba8f52c5509072d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6777df0ba400d154b56980614dde4e626de83a2c45000922df58892ac44af4d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:11:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:11:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb19b113d034573d1f8cf25f53671ac5e3294d12971418ba7ba8f52c5509072d"} {"level":"info","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6777df0ba400d154b56980614dde4e626de83a2c45000922df58892ac44af4d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27b17c6fbaa2515ff97f3a2cbe3ff5f7ab2c48295e7120c7dd303b25c8bf4f65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b67ceed084b093b589c455703a19cc242e0a3e5197dccc12cbf2efb918a593a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:11:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:11:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b67ceed084b093b589c455703a19cc242e0a3e5197dccc12cbf2efb918a593a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b67ceed084b093b589c455703a19cc242e0a3e5197dccc12cbf2efb918a593a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e50eccb285cf2e5b8b6a01c7ad7193691ae5d7cd6103da5c7a2b7f20be0c274","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:11:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:11:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e50eccb285cf2e5b8b6a01c7ad7193691ae5d7cd6103da5c7a2b7f20be0c274","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb19b113d034573d1f8cf25f53671ac5e3294d12971418ba7ba8f52c5509072d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:11:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:11:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb19b113d034573d1f8cf25f53671ac5e3294d12971418ba7ba8f52c5509072d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6777df0ba400d154b56980614dde4e626de83a2c45000922df58892ac44af4d3"} {"level":"info","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb19b113d034573d1f8cf25f53671ac5e3294d12971418ba7ba8f52c5509072d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6777df0ba400d154b56980614dde4e626de83a2c45000922df58892ac44af4d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:11:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:11:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6777df0ba400d154b56980614dde4e626de83a2c45000922df58892ac44af4d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27b17c6fbaa2515ff97f3a2cbe3ff5f7ab2c48295e7120c7dd303b25c8bf4f65"} {"level":"info","ts":"2026-07-15T14:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6777df0ba400d154b56980614dde4e626de83a2c45000922df58892ac44af4d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15889e9fa52af83bc9c03a0ab288dc073230e512a9c05ce8e3de2bb5d4475714","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:11:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:11:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b67ceed084b093b589c455703a19cc242e0a3e5197dccc12cbf2efb918a593a6"} {"level":"info","ts":"2026-07-15T14:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15889e9fa52af83bc9c03a0ab288dc073230e512a9c05ce8e3de2bb5d4475714","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b67ceed084b093b589c455703a19cc242e0a3e5197dccc12cbf2efb918a593a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4b001d2f6b7ec72656d6779fb80c388420599e54613eabdc6603bdc1fa34926","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:11:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:11:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e50eccb285cf2e5b8b6a01c7ad7193691ae5d7cd6103da5c7a2b7f20be0c274"} {"level":"info","ts":"2026-07-15T14:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4b001d2f6b7ec72656d6779fb80c388420599e54613eabdc6603bdc1fa34926","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e50eccb285cf2e5b8b6a01c7ad7193691ae5d7cd6103da5c7a2b7f20be0c274","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:11:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:11:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e50eccb285cf2e5b8b6a01c7ad7193691ae5d7cd6103da5c7a2b7f20be0c274"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e50eccb285cf2e5b8b6a01c7ad7193691ae5d7cd6103da5c7a2b7f20be0c274","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb19b113d034573d1f8cf25f53671ac5e3294d12971418ba7ba8f52c5509072d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6777df0ba400d154b56980614dde4e626de83a2c45000922df58892ac44af4d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15889e9fa52af83bc9c03a0ab288dc073230e512a9c05ce8e3de2bb5d4475714","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:11:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:11:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15889e9fa52af83bc9c03a0ab288dc073230e512a9c05ce8e3de2bb5d4475714"} {"level":"info","ts":"2026-07-15T14:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15889e9fa52af83bc9c03a0ab288dc073230e512a9c05ce8e3de2bb5d4475714","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4b001d2f6b7ec72656d6779fb80c388420599e54613eabdc6603bdc1fa34926","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:11:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:11:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4b001d2f6b7ec72656d6779fb80c388420599e54613eabdc6603bdc1fa34926"} {"level":"info","ts":"2026-07-15T14:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4b001d2f6b7ec72656d6779fb80c388420599e54613eabdc6603bdc1fa34926","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e50eccb285cf2e5b8b6a01c7ad7193691ae5d7cd6103da5c7a2b7f20be0c274","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15889e9fa52af83bc9c03a0ab288dc073230e512a9c05ce8e3de2bb5d4475714","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:11:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:11:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15889e9fa52af83bc9c03a0ab288dc073230e512a9c05ce8e3de2bb5d4475714"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6777df0ba400d154b56980614dde4e626de83a2c45000922df58892ac44af4d3"} {"level":"info","ts":"2026-07-15T14:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15889e9fa52af83bc9c03a0ab288dc073230e512a9c05ce8e3de2bb5d4475714","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4b001d2f6b7ec72656d6779fb80c388420599e54613eabdc6603bdc1fa34926","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:11:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:11:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4b001d2f6b7ec72656d6779fb80c388420599e54613eabdc6603bdc1fa34926"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4b001d2f6b7ec72656d6779fb80c388420599e54613eabdc6603bdc1fa34926","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15889e9fa52af83bc9c03a0ab288dc073230e512a9c05ce8e3de2bb5d4475714","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4b001d2f6b7ec72656d6779fb80c388420599e54613eabdc6603bdc1fa34926","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb19b113d034573d1f8cf25f53671ac5e3294d12971418ba7ba8f52c5509072d"} {"level":"info","ts":"2026-07-15T14:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e50eccb285cf2e5b8b6a01c7ad7193691ae5d7cd6103da5c7a2b7f20be0c274"} {"level":"info","ts":"2026-07-15T14:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15889e9fa52af83bc9c03a0ab288dc073230e512a9c05ce8e3de2bb5d4475714"} {"level":"info","ts":"2026-07-15T14:11:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4b001d2f6b7ec72656d6779fb80c388420599e54613eabdc6603bdc1fa34926"} {"level":"debug","ts":"2026-07-15T14:11:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55dde8fb0c28f78378c7687974f59bd6904187376bb1aa357804ad34cc79a78e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:11:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:11:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55dde8fb0c28f78378c7687974f59bd6904187376bb1aa357804ad34cc79a78e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55dde8fb0c28f78378c7687974f59bd6904187376bb1aa357804ad34cc79a78e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55dde8fb0c28f78378c7687974f59bd6904187376bb1aa357804ad34cc79a78e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:11:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55dde8fb0c28f78378c7687974f59bd6904187376bb1aa357804ad34cc79a78e"} {"level":"debug","ts":"2026-07-15T14:11:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55dde8fb0c28f78378c7687974f59bd6904187376bb1aa357804ad34cc79a78e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:11:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55dde8fb0c28f78378c7687974f59bd6904187376bb1aa357804ad34cc79a78e"} {"level":"debug","ts":"2026-07-15T14:11:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55dde8fb0c28f78378c7687974f59bd6904187376bb1aa357804ad34cc79a78e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:11:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:11:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55dde8fb0c28f78378c7687974f59bd6904187376bb1aa357804ad34cc79a78e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55dde8fb0c28f78378c7687974f59bd6904187376bb1aa357804ad34cc79a78e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55dde8fb0c28f78378c7687974f59bd6904187376bb1aa357804ad34cc79a78e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:11:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:11:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55dde8fb0c28f78378c7687974f59bd6904187376bb1aa357804ad34cc79a78e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55dde8fb0c28f78378c7687974f59bd6904187376bb1aa357804ad34cc79a78e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55dde8fb0c28f78378c7687974f59bd6904187376bb1aa357804ad34cc79a78e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:11:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55dde8fb0c28f78378c7687974f59bd6904187376bb1aa357804ad34cc79a78e"} {"level":"debug","ts":"2026-07-15T14:11:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55dde8fb0c28f78378c7687974f59bd6904187376bb1aa357804ad34cc79a78e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:11:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55dde8fb0c28f78378c7687974f59bd6904187376bb1aa357804ad34cc79a78e"} {"level":"debug","ts":"2026-07-15T14:11:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55dde8fb0c28f78378c7687974f59bd6904187376bb1aa357804ad34cc79a78e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:11:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:11:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55dde8fb0c28f78378c7687974f59bd6904187376bb1aa357804ad34cc79a78e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55dde8fb0c28f78378c7687974f59bd6904187376bb1aa357804ad34cc79a78e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55dde8fb0c28f78378c7687974f59bd6904187376bb1aa357804ad34cc79a78e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:11:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:11:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55dde8fb0c28f78378c7687974f59bd6904187376bb1aa357804ad34cc79a78e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55dde8fb0c28f78378c7687974f59bd6904187376bb1aa357804ad34cc79a78e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:11:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55dde8fb0c28f78378c7687974f59bd6904187376bb1aa357804ad34cc79a78e"} {"level":"debug","ts":"2026-07-15T14:11:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55dde8fb0c28f78378c7687974f59bd6904187376bb1aa357804ad34cc79a78e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:11:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55dde8fb0c28f78378c7687974f59bd6904187376bb1aa357804ad34cc79a78e"} {"level":"debug","ts":"2026-07-15T14:11:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55dde8fb0c28f78378c7687974f59bd6904187376bb1aa357804ad34cc79a78e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:11:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:11:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55dde8fb0c28f78378c7687974f59bd6904187376bb1aa357804ad34cc79a78e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55dde8fb0c28f78378c7687974f59bd6904187376bb1aa357804ad34cc79a78e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55dde8fb0c28f78378c7687974f59bd6904187376bb1aa357804ad34cc79a78e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:11:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55dde8fb0c28f78378c7687974f59bd6904187376bb1aa357804ad34cc79a78e"} {"level":"debug","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"860d1f3132b94706f2f5e5467c85a97205250233c2627eed2f52e69883ae47d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:11:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:11:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"860d1f3132b94706f2f5e5467c85a97205250233c2627eed2f52e69883ae47d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"860d1f3132b94706f2f5e5467c85a97205250233c2627eed2f52e69883ae47d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:11:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:11:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/860d1f3132b94706f2f5e5467c85a97205250233c2627eed2f52e69883ae47d5"} {"level":"info","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"860d1f3132b94706f2f5e5467c85a97205250233c2627eed2f52e69883ae47d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"860d1f3132b94706f2f5e5467c85a97205250233c2627eed2f52e69883ae47d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:11:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:11:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/860d1f3132b94706f2f5e5467c85a97205250233c2627eed2f52e69883ae47d5"} {"level":"error","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"860d1f3132b94706f2f5e5467c85a97205250233c2627eed2f52e69883ae47d5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"860d1f3132b94706f2f5e5467c85a97205250233c2627eed2f52e69883ae47d5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"860d1f3132b94706f2f5e5467c85a97205250233c2627eed2f52e69883ae47d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"860d1f3132b94706f2f5e5467c85a97205250233c2627eed2f52e69883ae47d5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/860d1f3132b94706f2f5e5467c85a97205250233c2627eed2f52e69883ae47d5"} {"level":"debug","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"860d1f3132b94706f2f5e5467c85a97205250233c2627eed2f52e69883ae47d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:11:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:11:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["860d1f3132b94706f2f5e5467c85a97205250233c2627eed2f52e69883ae47d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"860d1f3132b94706f2f5e5467c85a97205250233c2627eed2f52e69883ae47d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"860d1f3132b94706f2f5e5467c85a97205250233c2627eed2f52e69883ae47d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:11:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:11:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"860d1f3132b94706f2f5e5467c85a97205250233c2627eed2f52e69883ae47d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"860d1f3132b94706f2f5e5467c85a97205250233c2627eed2f52e69883ae47d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"860d1f3132b94706f2f5e5467c85a97205250233c2627eed2f52e69883ae47d5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/860d1f3132b94706f2f5e5467c85a97205250233c2627eed2f52e69883ae47d5"} {"level":"debug","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"860d1f3132b94706f2f5e5467c85a97205250233c2627eed2f52e69883ae47d5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/860d1f3132b94706f2f5e5467c85a97205250233c2627eed2f52e69883ae47d5"} {"level":"debug","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a711f26e90d0312f9c84e9a6acffac9572856f61342b077ebd29003fe772a1e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:11:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:11:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a711f26e90d0312f9c84e9a6acffac9572856f61342b077ebd29003fe772a1e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a711f26e90d0312f9c84e9a6acffac9572856f61342b077ebd29003fe772a1e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:11:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:11:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a711f26e90d0312f9c84e9a6acffac9572856f61342b077ebd29003fe772a1e3"} {"level":"info","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a711f26e90d0312f9c84e9a6acffac9572856f61342b077ebd29003fe772a1e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"860d1f3132b94706f2f5e5467c85a97205250233c2627eed2f52e69883ae47d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:11:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:11:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["860d1f3132b94706f2f5e5467c85a97205250233c2627eed2f52e69883ae47d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a711f26e90d0312f9c84e9a6acffac9572856f61342b077ebd29003fe772a1e3"} {"level":"info","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"860d1f3132b94706f2f5e5467c85a97205250233c2627eed2f52e69883ae47d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a711f26e90d0312f9c84e9a6acffac9572856f61342b077ebd29003fe772a1e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"860d1f3132b94706f2f5e5467c85a97205250233c2627eed2f52e69883ae47d5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a711f26e90d0312f9c84e9a6acffac9572856f61342b077ebd29003fe772a1e3"} {"level":"debug","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a711f26e90d0312f9c84e9a6acffac9572856f61342b077ebd29003fe772a1e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:11:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:11:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a711f26e90d0312f9c84e9a6acffac9572856f61342b077ebd29003fe772a1e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a711f26e90d0312f9c84e9a6acffac9572856f61342b077ebd29003fe772a1e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a711f26e90d0312f9c84e9a6acffac9572856f61342b077ebd29003fe772a1e3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/860d1f3132b94706f2f5e5467c85a97205250233c2627eed2f52e69883ae47d5"} {"level":"debug","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bfa028449d7d3e5f3f252d1ff1bac7a345b5ecb73a173fbb5eb8009511ac8ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:11:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:11:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bfa028449d7d3e5f3f252d1ff1bac7a345b5ecb73a173fbb5eb8009511ac8ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea58aa547ef6b9aaa6b708b0990053957ad167a9bd03fde3a00755e162d31a0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:11:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:11:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a711f26e90d0312f9c84e9a6acffac9572856f61342b077ebd29003fe772a1e3"} {"level":"info","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea58aa547ef6b9aaa6b708b0990053957ad167a9bd03fde3a00755e162d31a0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bfa028449d7d3e5f3f252d1ff1bac7a345b5ecb73a173fbb5eb8009511ac8ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:11:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:11:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bfa028449d7d3e5f3f252d1ff1bac7a345b5ecb73a173fbb5eb8009511ac8ee"} {"level":"info","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bfa028449d7d3e5f3f252d1ff1bac7a345b5ecb73a173fbb5eb8009511ac8ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea58aa547ef6b9aaa6b708b0990053957ad167a9bd03fde3a00755e162d31a0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:11:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:11:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea58aa547ef6b9aaa6b708b0990053957ad167a9bd03fde3a00755e162d31a0e"} {"level":"info","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea58aa547ef6b9aaa6b708b0990053957ad167a9bd03fde3a00755e162d31a0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bfa028449d7d3e5f3f252d1ff1bac7a345b5ecb73a173fbb5eb8009511ac8ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea58aa547ef6b9aaa6b708b0990053957ad167a9bd03fde3a00755e162d31a0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:11:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:11:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea58aa547ef6b9aaa6b708b0990053957ad167a9bd03fde3a00755e162d31a0e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea58aa547ef6b9aaa6b708b0990053957ad167a9bd03fde3a00755e162d31a0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea58aa547ef6b9aaa6b708b0990053957ad167a9bd03fde3a00755e162d31a0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:11:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:11:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea58aa547ef6b9aaa6b708b0990053957ad167a9bd03fde3a00755e162d31a0e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bfa028449d7d3e5f3f252d1ff1bac7a345b5ecb73a173fbb5eb8009511ac8ee"} {"level":"error","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ea58aa547ef6b9aaa6b708b0990053957ad167a9bd03fde3a00755e162d31a0e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ea58aa547ef6b9aaa6b708b0990053957ad167a9bd03fde3a00755e162d31a0e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bfa028449d7d3e5f3f252d1ff1bac7a345b5ecb73a173fbb5eb8009511ac8ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:11:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:11:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5bfa028449d7d3e5f3f252d1ff1bac7a345b5ecb73a173fbb5eb8009511ac8ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bfa028449d7d3e5f3f252d1ff1bac7a345b5ecb73a173fbb5eb8009511ac8ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea58aa547ef6b9aaa6b708b0990053957ad167a9bd03fde3a00755e162d31a0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:11:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:11:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea58aa547ef6b9aaa6b708b0990053957ad167a9bd03fde3a00755e162d31a0e"} {"level":"info","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea58aa547ef6b9aaa6b708b0990053957ad167a9bd03fde3a00755e162d31a0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bfa028449d7d3e5f3f252d1ff1bac7a345b5ecb73a173fbb5eb8009511ac8ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:11:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:11:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bfa028449d7d3e5f3f252d1ff1bac7a345b5ecb73a173fbb5eb8009511ac8ee"} {"level":"info","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bfa028449d7d3e5f3f252d1ff1bac7a345b5ecb73a173fbb5eb8009511ac8ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea58aa547ef6b9aaa6b708b0990053957ad167a9bd03fde3a00755e162d31a0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bfa028449d7d3e5f3f252d1ff1bac7a345b5ecb73a173fbb5eb8009511ac8ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:11:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:11:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5bfa028449d7d3e5f3f252d1ff1bac7a345b5ecb73a173fbb5eb8009511ac8ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bfa028449d7d3e5f3f252d1ff1bac7a345b5ecb73a173fbb5eb8009511ac8ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bfa028449d7d3e5f3f252d1ff1bac7a345b5ecb73a173fbb5eb8009511ac8ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:11:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:11:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5bfa028449d7d3e5f3f252d1ff1bac7a345b5ecb73a173fbb5eb8009511ac8ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea58aa547ef6b9aaa6b708b0990053957ad167a9bd03fde3a00755e162d31a0e"} {"level":"error","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5bfa028449d7d3e5f3f252d1ff1bac7a345b5ecb73a173fbb5eb8009511ac8ee","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5bfa028449d7d3e5f3f252d1ff1bac7a345b5ecb73a173fbb5eb8009511ac8ee\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea58aa547ef6b9aaa6b708b0990053957ad167a9bd03fde3a00755e162d31a0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:11:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:11:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea58aa547ef6b9aaa6b708b0990053957ad167a9bd03fde3a00755e162d31a0e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea58aa547ef6b9aaa6b708b0990053957ad167a9bd03fde3a00755e162d31a0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bfa028449d7d3e5f3f252d1ff1bac7a345b5ecb73a173fbb5eb8009511ac8ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:11:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:11:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bfa028449d7d3e5f3f252d1ff1bac7a345b5ecb73a173fbb5eb8009511ac8ee"} {"level":"info","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bfa028449d7d3e5f3f252d1ff1bac7a345b5ecb73a173fbb5eb8009511ac8ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea58aa547ef6b9aaa6b708b0990053957ad167a9bd03fde3a00755e162d31a0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:11:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:11:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea58aa547ef6b9aaa6b708b0990053957ad167a9bd03fde3a00755e162d31a0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96073f067c9366109c3b5fa4cb614e576d3cddbcadd8faf8db1799c37b1e6c89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:11:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:11:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea58aa547ef6b9aaa6b708b0990053957ad167a9bd03fde3a00755e162d31a0e"} {"level":"info","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96073f067c9366109c3b5fa4cb614e576d3cddbcadd8faf8db1799c37b1e6c89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bfa028449d7d3e5f3f252d1ff1bac7a345b5ecb73a173fbb5eb8009511ac8ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:11:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:11:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5bfa028449d7d3e5f3f252d1ff1bac7a345b5ecb73a173fbb5eb8009511ac8ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bfa028449d7d3e5f3f252d1ff1bac7a345b5ecb73a173fbb5eb8009511ac8ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea58aa547ef6b9aaa6b708b0990053957ad167a9bd03fde3a00755e162d31a0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:11:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:11:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea58aa547ef6b9aaa6b708b0990053957ad167a9bd03fde3a00755e162d31a0e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea58aa547ef6b9aaa6b708b0990053957ad167a9bd03fde3a00755e162d31a0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96073f067c9366109c3b5fa4cb614e576d3cddbcadd8faf8db1799c37b1e6c89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:11:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:11:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96073f067c9366109c3b5fa4cb614e576d3cddbcadd8faf8db1799c37b1e6c89"} {"level":"info","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96073f067c9366109c3b5fa4cb614e576d3cddbcadd8faf8db1799c37b1e6c89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bfa028449d7d3e5f3f252d1ff1bac7a345b5ecb73a173fbb5eb8009511ac8ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:11:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:11:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bfa028449d7d3e5f3f252d1ff1bac7a345b5ecb73a173fbb5eb8009511ac8ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea58aa547ef6b9aaa6b708b0990053957ad167a9bd03fde3a00755e162d31a0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96073f067c9366109c3b5fa4cb614e576d3cddbcadd8faf8db1799c37b1e6c89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:11:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:11:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["96073f067c9366109c3b5fa4cb614e576d3cddbcadd8faf8db1799c37b1e6c89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96073f067c9366109c3b5fa4cb614e576d3cddbcadd8faf8db1799c37b1e6c89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bfa028449d7d3e5f3f252d1ff1bac7a345b5ecb73a173fbb5eb8009511ac8ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16157c6d5824de47fcec7555dfa9e39a2617c27f18aee04c681c33bae7cc0cb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:11:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:11:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bfa028449d7d3e5f3f252d1ff1bac7a345b5ecb73a173fbb5eb8009511ac8ee"} {"level":"info","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16157c6d5824de47fcec7555dfa9e39a2617c27f18aee04c681c33bae7cc0cb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96073f067c9366109c3b5fa4cb614e576d3cddbcadd8faf8db1799c37b1e6c89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:11:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:11:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea58aa547ef6b9aaa6b708b0990053957ad167a9bd03fde3a00755e162d31a0e"} {"level":"info","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bfa028449d7d3e5f3f252d1ff1bac7a345b5ecb73a173fbb5eb8009511ac8ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:11:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:11:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5bfa028449d7d3e5f3f252d1ff1bac7a345b5ecb73a173fbb5eb8009511ac8ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bfa028449d7d3e5f3f252d1ff1bac7a345b5ecb73a173fbb5eb8009511ac8ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16157c6d5824de47fcec7555dfa9e39a2617c27f18aee04c681c33bae7cc0cb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bfa028449d7d3e5f3f252d1ff1bac7a345b5ecb73a173fbb5eb8009511ac8ee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96073f067c9366109c3b5fa4cb614e576d3cddbcadd8faf8db1799c37b1e6c89"} {"level":"debug","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16157c6d5824de47fcec7555dfa9e39a2617c27f18aee04c681c33bae7cc0cb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:11:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:11:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16157c6d5824de47fcec7555dfa9e39a2617c27f18aee04c681c33bae7cc0cb8"} {"level":"info","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16157c6d5824de47fcec7555dfa9e39a2617c27f18aee04c681c33bae7cc0cb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16157c6d5824de47fcec7555dfa9e39a2617c27f18aee04c681c33bae7cc0cb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:11:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:11:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16157c6d5824de47fcec7555dfa9e39a2617c27f18aee04c681c33bae7cc0cb8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bfa028449d7d3e5f3f252d1ff1bac7a345b5ecb73a173fbb5eb8009511ac8ee"} {"level":"info","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16157c6d5824de47fcec7555dfa9e39a2617c27f18aee04c681c33bae7cc0cb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16157c6d5824de47fcec7555dfa9e39a2617c27f18aee04c681c33bae7cc0cb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16157c6d5824de47fcec7555dfa9e39a2617c27f18aee04c681c33bae7cc0cb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:11:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:11:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe"} {"level":"info","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:11:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:11:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16157c6d5824de47fcec7555dfa9e39a2617c27f18aee04c681c33bae7cc0cb8"} {"level":"debug","ts":"2026-07-15T14:11:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:11:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:11:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe"} {"level":"info","ts":"2026-07-15T14:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fb24b4d0c98b8d6beaf008b2ef3fb6f3da385f4ec6932e310c49ddca1f1bcad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:11:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:11:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe"} {"level":"info","ts":"2026-07-15T14:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fb24b4d0c98b8d6beaf008b2ef3fb6f3da385f4ec6932e310c49ddca1f1bcad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:11:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:11:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fb24b4d0c98b8d6beaf008b2ef3fb6f3da385f4ec6932e310c49ddca1f1bcad"} {"level":"info","ts":"2026-07-15T14:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19c833cdd7788c2291c05046f461dfc8606920eb0f37c9babe0eaae70680579c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:11:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:11:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19c833cdd7788c2291c05046f461dfc8606920eb0f37c9babe0eaae70680579c"} {"level":"info","ts":"2026-07-15T14:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19c833cdd7788c2291c05046f461dfc8606920eb0f37c9babe0eaae70680579c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fb24b4d0c98b8d6beaf008b2ef3fb6f3da385f4ec6932e310c49ddca1f1bcad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:11:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:11:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fb24b4d0c98b8d6beaf008b2ef3fb6f3da385f4ec6932e310c49ddca1f1bcad"} {"level":"info","ts":"2026-07-15T14:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fb24b4d0c98b8d6beaf008b2ef3fb6f3da385f4ec6932e310c49ddca1f1bcad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:11:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:11:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19c833cdd7788c2291c05046f461dfc8606920eb0f37c9babe0eaae70680579c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:11:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:11:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19c833cdd7788c2291c05046f461dfc8606920eb0f37c9babe0eaae70680579c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe"} {"level":"info","ts":"2026-07-15T14:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19c833cdd7788c2291c05046f461dfc8606920eb0f37c9babe0eaae70680579c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fb24b4d0c98b8d6beaf008b2ef3fb6f3da385f4ec6932e310c49ddca1f1bcad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:11:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:11:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9fb24b4d0c98b8d6beaf008b2ef3fb6f3da385f4ec6932e310c49ddca1f1bcad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19c833cdd7788c2291c05046f461dfc8606920eb0f37c9babe0eaae70680579c"} {"level":"info","ts":"2026-07-15T14:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fb24b4d0c98b8d6beaf008b2ef3fb6f3da385f4ec6932e310c49ddca1f1bcad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:11:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:11:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19c833cdd7788c2291c05046f461dfc8606920eb0f37c9babe0eaae70680579c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"957910543d279409e3172c4fc78634940645c8582c245ab42ae27427433cf010","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:11:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:11:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fb24b4d0c98b8d6beaf008b2ef3fb6f3da385f4ec6932e310c49ddca1f1bcad"} {"level":"info","ts":"2026-07-15T14:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"957910543d279409e3172c4fc78634940645c8582c245ab42ae27427433cf010","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9fb24b4d0c98b8d6beaf008b2ef3fb6f3da385f4ec6932e310c49ddca1f1bcad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:11:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:11:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe"} {"level":"info","ts":"2026-07-15T14:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"957910543d279409e3172c4fc78634940645c8582c245ab42ae27427433cf010","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:11:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:11:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/957910543d279409e3172c4fc78634940645c8582c245ab42ae27427433cf010"} {"level":"info","ts":"2026-07-15T14:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"957910543d279409e3172c4fc78634940645c8582c245ab42ae27427433cf010","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:11:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:11:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19c833cdd7788c2291c05046f461dfc8606920eb0f37c9babe0eaae70680579c"} {"level":"info","ts":"2026-07-15T14:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"957910543d279409e3172c4fc78634940645c8582c245ab42ae27427433cf010","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:11:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:11:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["957910543d279409e3172c4fc78634940645c8582c245ab42ae27427433cf010"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fb24b4d0c98b8d6beaf008b2ef3fb6f3da385f4ec6932e310c49ddca1f1bcad"} {"level":"info","ts":"2026-07-15T14:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"957910543d279409e3172c4fc78634940645c8582c245ab42ae27427433cf010","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:11:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:11:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe"} {"level":"info","ts":"2026-07-15T14:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/957910543d279409e3172c4fc78634940645c8582c245ab42ae27427433cf010"} {"level":"info","ts":"2026-07-15T14:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4973306b384733a61a9112bc9e26aa87b36772d6e8b6618ba867f9564843f4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:11:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:11:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4973306b384733a61a9112bc9e26aa87b36772d6e8b6618ba867f9564843f4d"} {"level":"info","ts":"2026-07-15T14:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe"} {"level":"info","ts":"2026-07-15T14:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4973306b384733a61a9112bc9e26aa87b36772d6e8b6618ba867f9564843f4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"957910543d279409e3172c4fc78634940645c8582c245ab42ae27427433cf010","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:11:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:11:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4973306b384733a61a9112bc9e26aa87b36772d6e8b6618ba867f9564843f4d"} {"level":"info","ts":"2026-07-15T14:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4973306b384733a61a9112bc9e26aa87b36772d6e8b6618ba867f9564843f4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:11:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:11:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4973306b384733a61a9112bc9e26aa87b36772d6e8b6618ba867f9564843f4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe"} {"level":"info","ts":"2026-07-15T14:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4973306b384733a61a9112bc9e26aa87b36772d6e8b6618ba867f9564843f4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4973306b384733a61a9112bc9e26aa87b36772d6e8b6618ba867f9564843f4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:11:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:11:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4973306b384733a61a9112bc9e26aa87b36772d6e8b6618ba867f9564843f4d"} {"level":"info","ts":"2026-07-15T14:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4973306b384733a61a9112bc9e26aa87b36772d6e8b6618ba867f9564843f4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4973306b384733a61a9112bc9e26aa87b36772d6e8b6618ba867f9564843f4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4973306b384733a61a9112bc9e26aa87b36772d6e8b6618ba867f9564843f4d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4973306b384733a61a9112bc9e26aa87b36772d6e8b6618ba867f9564843f4d"} {"level":"debug","ts":"2026-07-15T14:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4973306b384733a61a9112bc9e26aa87b36772d6e8b6618ba867f9564843f4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:11:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:11:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4973306b384733a61a9112bc9e26aa87b36772d6e8b6618ba867f9564843f4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4973306b384733a61a9112bc9e26aa87b36772d6e8b6618ba867f9564843f4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4973306b384733a61a9112bc9e26aa87b36772d6e8b6618ba867f9564843f4d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:11:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4973306b384733a61a9112bc9e26aa87b36772d6e8b6618ba867f9564843f4d"} {"level":"info","ts":"2026-07-15T14:11:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c87d8c2-55cb-41ff-95b8-c573ca23f8e9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39158","PortSpecifier":{"PortValue":39158}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0c87d8c2-55cb-41ff-95b8-c573ca23f8e9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T14:11:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c87d8c2-55cb-41ff-95b8-c573ca23f8e9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39158","PortSpecifier":{"PortValue":39158}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784124699,"nanos":600551179},"http":{"id":"0c87d8c2-55cb-41ff-95b8-c573ca23f8e9","method":"POST","headers":{":authority":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:11:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0c87d8c2-55cb-41ff-95b8-c573ca23f8e9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T14:11:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0c87d8c2-55cb-41ff-95b8-c573ca23f8e9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"34acd1b1-d11c-4700-9be9-1507d93f5695","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6662a338-e456-488d-8970-2d47aeede02a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1aa8eda4e980"]}} {"level":"debug","ts":"2026-07-15T14:11:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0c87d8c2-55cb-41ff-95b8-c573ca23f8e9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1aa8eda4e980"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6662a338-e456-488d-8970-2d47aeede02a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"34acd1b1-d11c-4700-9be9-1507d93f5695","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"27b17c6fbaa2515ff97f3a2cbe3ff5f7ab2c48295e7120c7dd303b25c8bf4f65"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:11:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c87d8c2-55cb-41ff-95b8-c573ca23f8e9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:11:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c87d8c2-55cb-41ff-95b8-c573ca23f8e9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:11:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c87d8c2-55cb-41ff-95b8-c573ca23f8e9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2723e9/auth-test-model-2723e9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2723e9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:11:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0c87d8c2-55cb-41ff-95b8-c573ca23f8e9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T14:11:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c87d8c2-55cb-41ff-95b8-c573ca23f8e9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T14:11:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c87d8c2-55cb-41ff-95b8-c573ca23f8e9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-15T14:11:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c87d8c2-55cb-41ff-95b8-c573ca23f8e9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T14:11:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c87d8c2-55cb-41ff-95b8-c573ca23f8e9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T14:11:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"82b1a19c-e192-4e31-a597-818f3aa21cd5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39918","PortSpecifier":{"PortValue":39918}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"82b1a19c-e192-4e31-a597-818f3aa21cd5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-bfdd40.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T14:11:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"82b1a19c-e192-4e31-a597-818f3aa21cd5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39918","PortSpecifier":{"PortValue":39918}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784124699,"nanos":667342507},"http":{"id":"82b1a19c-e192-4e31-a597-818f3aa21cd5","method":"POST","headers":{":authority":"e2e-shared-b-bfdd40.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:11:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"82b1a19c-e192-4e31-a597-818f3aa21cd5","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T14:11:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"82b1a19c-e192-4e31-a597-818f3aa21cd5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"34acd1b1-d11c-4700-9be9-1507d93f5695","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6662a338-e456-488d-8970-2d47aeede02a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1aa8eda4e980"]}} {"level":"debug","ts":"2026-07-15T14:11:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"82b1a19c-e192-4e31-a597-818f3aa21cd5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1aa8eda4e980"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6662a338-e456-488d-8970-2d47aeede02a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"34acd1b1-d11c-4700-9be9-1507d93f5695","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"16157c6d5824de47fcec7555dfa9e39a2617c27f18aee04c681c33bae7cc0cb8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-bfdd40.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:11:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82b1a19c-e192-4e31-a597-818f3aa21cd5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:11:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82b1a19c-e192-4e31-a597-818f3aa21cd5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:11:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82b1a19c-e192-4e31-a597-818f3aa21cd5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-bfdd40/auth-test-model-bfdd40\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-bfdd40/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:11:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"82b1a19c-e192-4e31-a597-818f3aa21cd5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T14:11:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82b1a19c-e192-4e31-a597-818f3aa21cd5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T14:11:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82b1a19c-e192-4e31-a597-818f3aa21cd5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T14:11:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"82b1a19c-e192-4e31-a597-818f3aa21cd5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T14:11:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"82b1a19c-e192-4e31-a597-818f3aa21cd5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T14:11:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9926325a-fd72-471a-a29b-5c1e230bd515","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39172","PortSpecifier":{"PortValue":39172}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9926325a-fd72-471a-a29b-5c1e230bd515","method":"GET","path":"/maas-api/v1/api-keys/142abd81-9639-46cd-839e-173bd284068b","host":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T14:11:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9926325a-fd72-471a-a29b-5c1e230bd515","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39172","PortSpecifier":{"PortValue":39172}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784124699,"nanos":727428317},"http":{"id":"9926325a-fd72-471a-a29b-5c1e230bd515","method":"GET","headers":{":authority":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/142abd81-9639-46cd-839e-173bd284068b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:11:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9926325a-fd72-471a-a29b-5c1e230bd515","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T14:11:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9926325a-fd72-471a-a29b-5c1e230bd515","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"34acd1b1-d11c-4700-9be9-1507d93f5695","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6662a338-e456-488d-8970-2d47aeede02a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1aa8eda4e980"]}} {"level":"debug","ts":"2026-07-15T14:11:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9926325a-fd72-471a-a29b-5c1e230bd515","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1aa8eda4e980"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6662a338-e456-488d-8970-2d47aeede02a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"34acd1b1-d11c-4700-9be9-1507d93f5695","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"27b17c6fbaa2515ff97f3a2cbe3ff5f7ab2c48295e7120c7dd303b25c8bf4f65"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/142abd81-9639-46cd-839e-173bd284068b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:11:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9926325a-fd72-471a-a29b-5c1e230bd515","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:11:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9926325a-fd72-471a-a29b-5c1e230bd515","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:11:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9926325a-fd72-471a-a29b-5c1e230bd515","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2723e9/auth-test-model-2723e9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2723e9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:11:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9926325a-fd72-471a-a29b-5c1e230bd515","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T14:11:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9926325a-fd72-471a-a29b-5c1e230bd515","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T14:11:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9926325a-fd72-471a-a29b-5c1e230bd515","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T14:11:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9926325a-fd72-471a-a29b-5c1e230bd515","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T14:11:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9926325a-fd72-471a-a29b-5c1e230bd515","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T14:11:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"82af2fbc-1d25-41e2-82b4-4e1c358b5481","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39922","PortSpecifier":{"PortValue":39922}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"82af2fbc-1d25-41e2-82b4-4e1c358b5481","method":"GET","path":"/maas-api/v1/api-keys/eeb04878-c4b2-487d-bf41-07d5c3c800f3","host":"e2e-shared-b-bfdd40.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T14:11:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"82af2fbc-1d25-41e2-82b4-4e1c358b5481","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39922","PortSpecifier":{"PortValue":39922}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784124699,"nanos":764507235},"http":{"id":"82af2fbc-1d25-41e2-82b4-4e1c358b5481","method":"GET","headers":{":authority":"e2e-shared-b-bfdd40.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/eeb04878-c4b2-487d-bf41-07d5c3c800f3",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:11:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"82af2fbc-1d25-41e2-82b4-4e1c358b5481","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T14:11:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"82af2fbc-1d25-41e2-82b4-4e1c358b5481","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"34acd1b1-d11c-4700-9be9-1507d93f5695","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6662a338-e456-488d-8970-2d47aeede02a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1aa8eda4e980"]}} {"level":"debug","ts":"2026-07-15T14:11:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"82af2fbc-1d25-41e2-82b4-4e1c358b5481","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1aa8eda4e980"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6662a338-e456-488d-8970-2d47aeede02a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"34acd1b1-d11c-4700-9be9-1507d93f5695","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"16157c6d5824de47fcec7555dfa9e39a2617c27f18aee04c681c33bae7cc0cb8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-bfdd40.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/eeb04878-c4b2-487d-bf41-07d5c3c800f3",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:11:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82af2fbc-1d25-41e2-82b4-4e1c358b5481","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:11:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82af2fbc-1d25-41e2-82b4-4e1c358b5481","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:11:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82af2fbc-1d25-41e2-82b4-4e1c358b5481","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-bfdd40/auth-test-model-bfdd40\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-bfdd40/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:11:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"82af2fbc-1d25-41e2-82b4-4e1c358b5481","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T14:11:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82af2fbc-1d25-41e2-82b4-4e1c358b5481","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T14:11:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82af2fbc-1d25-41e2-82b4-4e1c358b5481","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T14:11:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"82af2fbc-1d25-41e2-82b4-4e1c358b5481","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T14:11:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"82af2fbc-1d25-41e2-82b4-4e1c358b5481","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T14:11:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5a90b6c5-7227-407e-b32d-6b9345b82adf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:35452","PortSpecifier":{"PortValue":35452}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5a90b6c5-7227-407e-b32d-6b9345b82adf","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T14:11:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5a90b6c5-7227-407e-b32d-6b9345b82adf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:35452","PortSpecifier":{"PortValue":35452}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784124717,"nanos":138097719},"http":{"id":"5a90b6c5-7227-407e-b32d-6b9345b82adf","method":"POST","headers":{":authority":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:11:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5a90b6c5-7227-407e-b32d-6b9345b82adf","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T14:11:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5a90b6c5-7227-407e-b32d-6b9345b82adf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"34acd1b1-d11c-4700-9be9-1507d93f5695","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6662a338-e456-488d-8970-2d47aeede02a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1aa8eda4e980"]}} {"level":"debug","ts":"2026-07-15T14:11:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5a90b6c5-7227-407e-b32d-6b9345b82adf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1aa8eda4e980"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6662a338-e456-488d-8970-2d47aeede02a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"34acd1b1-d11c-4700-9be9-1507d93f5695","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"27b17c6fbaa2515ff97f3a2cbe3ff5f7ab2c48295e7120c7dd303b25c8bf4f65"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:11:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5a90b6c5-7227-407e-b32d-6b9345b82adf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:11:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5a90b6c5-7227-407e-b32d-6b9345b82adf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:11:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5a90b6c5-7227-407e-b32d-6b9345b82adf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2723e9/auth-test-model-2723e9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2723e9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:11:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5a90b6c5-7227-407e-b32d-6b9345b82adf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T14:11:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5a90b6c5-7227-407e-b32d-6b9345b82adf","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T14:11:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5a90b6c5-7227-407e-b32d-6b9345b82adf","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-15T14:11:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5a90b6c5-7227-407e-b32d-6b9345b82adf","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T14:11:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5a90b6c5-7227-407e-b32d-6b9345b82adf","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T14:11:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"33308502-d6d5-4d28-a6dd-358f6828819e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53784","PortSpecifier":{"PortValue":53784}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"33308502-d6d5-4d28-a6dd-358f6828819e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-bfdd40.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T14:11:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"33308502-d6d5-4d28-a6dd-358f6828819e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53784","PortSpecifier":{"PortValue":53784}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784124717,"nanos":180916394},"http":{"id":"33308502-d6d5-4d28-a6dd-358f6828819e","method":"POST","headers":{":authority":"e2e-shared-b-bfdd40.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:11:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"33308502-d6d5-4d28-a6dd-358f6828819e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T14:11:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"33308502-d6d5-4d28-a6dd-358f6828819e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"34acd1b1-d11c-4700-9be9-1507d93f5695","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6662a338-e456-488d-8970-2d47aeede02a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1aa8eda4e980"]}} {"level":"debug","ts":"2026-07-15T14:11:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"33308502-d6d5-4d28-a6dd-358f6828819e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1aa8eda4e980"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6662a338-e456-488d-8970-2d47aeede02a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"34acd1b1-d11c-4700-9be9-1507d93f5695","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"16157c6d5824de47fcec7555dfa9e39a2617c27f18aee04c681c33bae7cc0cb8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-bfdd40.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:11:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33308502-d6d5-4d28-a6dd-358f6828819e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:11:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33308502-d6d5-4d28-a6dd-358f6828819e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:11:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33308502-d6d5-4d28-a6dd-358f6828819e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-bfdd40/auth-test-model-bfdd40\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-bfdd40/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:11:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"33308502-d6d5-4d28-a6dd-358f6828819e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T14:11:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33308502-d6d5-4d28-a6dd-358f6828819e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T14:11:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33308502-d6d5-4d28-a6dd-358f6828819e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T14:11:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"33308502-d6d5-4d28-a6dd-358f6828819e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T14:11:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"33308502-d6d5-4d28-a6dd-358f6828819e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T14:11:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"db735229-eade-4d26-acb9-429a732f65a3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:35466","PortSpecifier":{"PortValue":35466}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"db735229-eade-4d26-acb9-429a732f65a3","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T14:11:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"db735229-eade-4d26-acb9-429a732f65a3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:35466","PortSpecifier":{"PortValue":35466}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784124717,"nanos":220351091},"http":{"id":"db735229-eade-4d26-acb9-429a732f65a3","method":"GET","headers":{":authority":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:11:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"db735229-eade-4d26-acb9-429a732f65a3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1H0uxasOcnrviKiBN_y1MZfm292S2QXwJSc7h6fhUmcSVV47MksjCXUU2m0in"} {"level":"debug","ts":"2026-07-15T14:11:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"db735229-eade-4d26-acb9-429a732f65a3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2723e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1H0uxasOcnrviKiBN_y1MZfm292S2QXwJSc7h6fhUmcSVV47MksjCXUU2m0in\"}"} {"level":"debug","ts":"2026-07-15T14:11:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"db735229-eade-4d26-acb9-429a732f65a3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2723e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8f5832ab-97d9-4313-b32a-159f30516b56","keyName":"e2e-auth-iso-a-70af03","subscription":"e2e-auth-iso-16711f","tenant":"e2e-shared-a-2723e9","userId":"8f5832ab-97d9-4313-b32a-159f30516b56","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-15T14:11:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"db735229-eade-4d26-acb9-429a732f65a3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:11:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db735229-eade-4d26-acb9-429a732f65a3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:11:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db735229-eade-4d26-acb9-429a732f65a3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:11:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db735229-eade-4d26-acb9-429a732f65a3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2723e9/auth-test-model-2723e9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2723e9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:11:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"db735229-eade-4d26-acb9-429a732f65a3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-16711f"} {"level":"debug","ts":"2026-07-15T14:11:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"db735229-eade-4d26-acb9-429a732f65a3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T14:11:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"db735229-eade-4d26-acb9-429a732f65a3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T14:11:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"db735229-eade-4d26-acb9-429a732f65a3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-15T14:11:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"db735229-eade-4d26-acb9-429a732f65a3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T14:11:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"db735229-eade-4d26-acb9-429a732f65a3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T14:12:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0348f340-e5e3-4d72-b0c5-0f12121fa6ee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56966","PortSpecifier":{"PortValue":56966}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0348f340-e5e3-4d72-b0c5-0f12121fa6ee","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T14:12:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0348f340-e5e3-4d72-b0c5-0f12121fa6ee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56966","PortSpecifier":{"PortValue":56966}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784124734,"nanos":583804231},"http":{"id":"0348f340-e5e3-4d72-b0c5-0f12121fa6ee","method":"POST","headers":{":authority":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:12:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0348f340-e5e3-4d72-b0c5-0f12121fa6ee","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T14:12:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0348f340-e5e3-4d72-b0c5-0f12121fa6ee","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"34acd1b1-d11c-4700-9be9-1507d93f5695","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6662a338-e456-488d-8970-2d47aeede02a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1aa8eda4e980"]}} {"level":"debug","ts":"2026-07-15T14:12:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0348f340-e5e3-4d72-b0c5-0f12121fa6ee","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1aa8eda4e980"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6662a338-e456-488d-8970-2d47aeede02a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"34acd1b1-d11c-4700-9be9-1507d93f5695","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"27b17c6fbaa2515ff97f3a2cbe3ff5f7ab2c48295e7120c7dd303b25c8bf4f65"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:12:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0348f340-e5e3-4d72-b0c5-0f12121fa6ee","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:12:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0348f340-e5e3-4d72-b0c5-0f12121fa6ee","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:12:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0348f340-e5e3-4d72-b0c5-0f12121fa6ee","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2723e9/auth-test-model-2723e9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2723e9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:12:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0348f340-e5e3-4d72-b0c5-0f12121fa6ee","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T14:12:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0348f340-e5e3-4d72-b0c5-0f12121fa6ee","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T14:12:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0348f340-e5e3-4d72-b0c5-0f12121fa6ee","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-15T14:12:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0348f340-e5e3-4d72-b0c5-0f12121fa6ee","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T14:12:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0348f340-e5e3-4d72-b0c5-0f12121fa6ee","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T14:12:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a50a799a-9de8-4c70-9adf-815a8abc0e0f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38998","PortSpecifier":{"PortValue":38998}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a50a799a-9de8-4c70-9adf-815a8abc0e0f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-bfdd40.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T14:12:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a50a799a-9de8-4c70-9adf-815a8abc0e0f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38998","PortSpecifier":{"PortValue":38998}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784124734,"nanos":620634746},"http":{"id":"a50a799a-9de8-4c70-9adf-815a8abc0e0f","method":"POST","headers":{":authority":"e2e-shared-b-bfdd40.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:12:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a50a799a-9de8-4c70-9adf-815a8abc0e0f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T14:12:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a50a799a-9de8-4c70-9adf-815a8abc0e0f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"34acd1b1-d11c-4700-9be9-1507d93f5695","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6662a338-e456-488d-8970-2d47aeede02a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1aa8eda4e980"]}} {"level":"debug","ts":"2026-07-15T14:12:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a50a799a-9de8-4c70-9adf-815a8abc0e0f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1aa8eda4e980"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6662a338-e456-488d-8970-2d47aeede02a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"34acd1b1-d11c-4700-9be9-1507d93f5695","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"16157c6d5824de47fcec7555dfa9e39a2617c27f18aee04c681c33bae7cc0cb8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-bfdd40.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:12:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a50a799a-9de8-4c70-9adf-815a8abc0e0f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:12:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a50a799a-9de8-4c70-9adf-815a8abc0e0f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:12:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a50a799a-9de8-4c70-9adf-815a8abc0e0f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-bfdd40/auth-test-model-bfdd40\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-bfdd40/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:12:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a50a799a-9de8-4c70-9adf-815a8abc0e0f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T14:12:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a50a799a-9de8-4c70-9adf-815a8abc0e0f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T14:12:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a50a799a-9de8-4c70-9adf-815a8abc0e0f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T14:12:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a50a799a-9de8-4c70-9adf-815a8abc0e0f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T14:12:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a50a799a-9de8-4c70-9adf-815a8abc0e0f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T14:12:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8b457f31-5c68-420d-b481-85cc0572fa2c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39006","PortSpecifier":{"PortValue":39006}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8b457f31-5c68-420d-b481-85cc0572fa2c","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-bfdd40.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T14:12:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8b457f31-5c68-420d-b481-85cc0572fa2c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39006","PortSpecifier":{"PortValue":39006}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784124734,"nanos":660626074},"http":{"id":"8b457f31-5c68-420d-b481-85cc0572fa2c","method":"GET","headers":{":authority":"e2e-shared-b-bfdd40.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:12:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8b457f31-5c68-420d-b481-85cc0572fa2c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-FzOFB1dCarubYSuI_w2k1Iof7bYrcdMxkpKYSpb1MR6vW59Oubwwm8GmtocI"} {"level":"debug","ts":"2026-07-15T14:12:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8b457f31-5c68-420d-b481-85cc0572fa2c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-bfdd40.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-FzOFB1dCarubYSuI_w2k1Iof7bYrcdMxkpKYSpb1MR6vW59Oubwwm8GmtocI\"}"} {"level":"debug","ts":"2026-07-15T14:12:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8b457f31-5c68-420d-b481-85cc0572fa2c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-bfdd40.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-15T14:12:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8b457f31-5c68-420d-b481-85cc0572fa2c","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"16157c6d5824de47fcec7555dfa9e39a2617c27f18aee04c681c33bae7cc0cb8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-bfdd40.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:12:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"8b457f31-5c68-420d-b481-85cc0572fa2c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-15T14:12:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8b457f31-5c68-420d-b481-85cc0572fa2c","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-15T14:12:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8b457f31-5c68-420d-b481-85cc0572fa2c","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-07-15T14:12:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"24100c81-ae59-40e3-b9fc-97f31ffb908f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60948","PortSpecifier":{"PortValue":60948}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"24100c81-ae59-40e3-b9fc-97f31ffb908f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T14:12:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"24100c81-ae59-40e3-b9fc-97f31ffb908f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60948","PortSpecifier":{"PortValue":60948}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784124752,"nanos":60421403},"http":{"id":"24100c81-ae59-40e3-b9fc-97f31ffb908f","method":"POST","headers":{":authority":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:12:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"24100c81-ae59-40e3-b9fc-97f31ffb908f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T14:12:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"24100c81-ae59-40e3-b9fc-97f31ffb908f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"34acd1b1-d11c-4700-9be9-1507d93f5695","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6662a338-e456-488d-8970-2d47aeede02a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1aa8eda4e980"]}} {"level":"debug","ts":"2026-07-15T14:12:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"24100c81-ae59-40e3-b9fc-97f31ffb908f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1aa8eda4e980"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6662a338-e456-488d-8970-2d47aeede02a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"34acd1b1-d11c-4700-9be9-1507d93f5695","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"27b17c6fbaa2515ff97f3a2cbe3ff5f7ab2c48295e7120c7dd303b25c8bf4f65"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:12:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24100c81-ae59-40e3-b9fc-97f31ffb908f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:12:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24100c81-ae59-40e3-b9fc-97f31ffb908f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:12:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24100c81-ae59-40e3-b9fc-97f31ffb908f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2723e9/auth-test-model-2723e9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2723e9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:12:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"24100c81-ae59-40e3-b9fc-97f31ffb908f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T14:12:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24100c81-ae59-40e3-b9fc-97f31ffb908f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T14:12:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24100c81-ae59-40e3-b9fc-97f31ffb908f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T14:12:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"24100c81-ae59-40e3-b9fc-97f31ffb908f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T14:12:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"24100c81-ae59-40e3-b9fc-97f31ffb908f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T14:12:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5bebda07-d48b-4026-85f3-48070806fff5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:59582","PortSpecifier":{"PortValue":59582}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5bebda07-d48b-4026-85f3-48070806fff5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-bfdd40.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T14:12:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5bebda07-d48b-4026-85f3-48070806fff5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:59582","PortSpecifier":{"PortValue":59582}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784124752,"nanos":100036295},"http":{"id":"5bebda07-d48b-4026-85f3-48070806fff5","method":"POST","headers":{":authority":"e2e-shared-b-bfdd40.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:12:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5bebda07-d48b-4026-85f3-48070806fff5","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T14:12:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5bebda07-d48b-4026-85f3-48070806fff5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"34acd1b1-d11c-4700-9be9-1507d93f5695","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6662a338-e456-488d-8970-2d47aeede02a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1aa8eda4e980"]}} {"level":"debug","ts":"2026-07-15T14:12:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5bebda07-d48b-4026-85f3-48070806fff5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1aa8eda4e980"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6662a338-e456-488d-8970-2d47aeede02a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"34acd1b1-d11c-4700-9be9-1507d93f5695","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"16157c6d5824de47fcec7555dfa9e39a2617c27f18aee04c681c33bae7cc0cb8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-bfdd40.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:12:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5bebda07-d48b-4026-85f3-48070806fff5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:12:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5bebda07-d48b-4026-85f3-48070806fff5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:12:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5bebda07-d48b-4026-85f3-48070806fff5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-bfdd40/auth-test-model-bfdd40\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-bfdd40/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:12:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5bebda07-d48b-4026-85f3-48070806fff5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T14:12:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5bebda07-d48b-4026-85f3-48070806fff5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T14:12:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5bebda07-d48b-4026-85f3-48070806fff5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T14:12:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5bebda07-d48b-4026-85f3-48070806fff5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T14:12:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5bebda07-d48b-4026-85f3-48070806fff5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T14:12:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"75131081-2dd4-40d4-9f5a-830a2999273c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60954","PortSpecifier":{"PortValue":60954}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"75131081-2dd4-40d4-9f5a-830a2999273c","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T14:12:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"75131081-2dd4-40d4-9f5a-830a2999273c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60954","PortSpecifier":{"PortValue":60954}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784124752,"nanos":138786780},"http":{"id":"75131081-2dd4-40d4-9f5a-830a2999273c","method":"POST","headers":{":authority":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:12:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"75131081-2dd4-40d4-9f5a-830a2999273c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T14:12:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"75131081-2dd4-40d4-9f5a-830a2999273c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"34acd1b1-d11c-4700-9be9-1507d93f5695","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6662a338-e456-488d-8970-2d47aeede02a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1aa8eda4e980"]}} {"level":"debug","ts":"2026-07-15T14:12:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"75131081-2dd4-40d4-9f5a-830a2999273c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1aa8eda4e980"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6662a338-e456-488d-8970-2d47aeede02a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"34acd1b1-d11c-4700-9be9-1507d93f5695","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"27b17c6fbaa2515ff97f3a2cbe3ff5f7ab2c48295e7120c7dd303b25c8bf4f65"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:12:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75131081-2dd4-40d4-9f5a-830a2999273c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:12:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75131081-2dd4-40d4-9f5a-830a2999273c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:12:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75131081-2dd4-40d4-9f5a-830a2999273c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2723e9/auth-test-model-2723e9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2723e9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:12:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"75131081-2dd4-40d4-9f5a-830a2999273c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T14:12:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75131081-2dd4-40d4-9f5a-830a2999273c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T14:12:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75131081-2dd4-40d4-9f5a-830a2999273c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T14:12:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"75131081-2dd4-40d4-9f5a-830a2999273c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T14:12:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"75131081-2dd4-40d4-9f5a-830a2999273c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T14:12:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d97e2d0-6753-4e77-b895-a7df1088403f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:59592","PortSpecifier":{"PortValue":59592}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3d97e2d0-6753-4e77-b895-a7df1088403f","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-bfdd40.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T14:12:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d97e2d0-6753-4e77-b895-a7df1088403f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:59592","PortSpecifier":{"PortValue":59592}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784124752,"nanos":180539757},"http":{"id":"3d97e2d0-6753-4e77-b895-a7df1088403f","method":"POST","headers":{":authority":"e2e-shared-b-bfdd40.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:12:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3d97e2d0-6753-4e77-b895-a7df1088403f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T14:12:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3d97e2d0-6753-4e77-b895-a7df1088403f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"34acd1b1-d11c-4700-9be9-1507d93f5695","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6662a338-e456-488d-8970-2d47aeede02a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1aa8eda4e980"]}} {"level":"debug","ts":"2026-07-15T14:12:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3d97e2d0-6753-4e77-b895-a7df1088403f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1aa8eda4e980"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6662a338-e456-488d-8970-2d47aeede02a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"34acd1b1-d11c-4700-9be9-1507d93f5695","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"16157c6d5824de47fcec7555dfa9e39a2617c27f18aee04c681c33bae7cc0cb8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-bfdd40.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:12:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d97e2d0-6753-4e77-b895-a7df1088403f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:12:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d97e2d0-6753-4e77-b895-a7df1088403f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:12:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d97e2d0-6753-4e77-b895-a7df1088403f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-bfdd40/auth-test-model-bfdd40\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-bfdd40/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:12:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3d97e2d0-6753-4e77-b895-a7df1088403f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T14:12:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d97e2d0-6753-4e77-b895-a7df1088403f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T14:12:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d97e2d0-6753-4e77-b895-a7df1088403f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T14:12:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d97e2d0-6753-4e77-b895-a7df1088403f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T14:12:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d97e2d0-6753-4e77-b895-a7df1088403f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T14:12:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1c2827bf-680e-4de4-b89b-33d6eefa739d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:34648","PortSpecifier":{"PortValue":34648}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1c2827bf-680e-4de4-b89b-33d6eefa739d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T14:12:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1c2827bf-680e-4de4-b89b-33d6eefa739d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:34648","PortSpecifier":{"PortValue":34648}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784124769,"nanos":663482922},"http":{"id":"1c2827bf-680e-4de4-b89b-33d6eefa739d","method":"POST","headers":{":authority":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:12:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1c2827bf-680e-4de4-b89b-33d6eefa739d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T14:12:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1c2827bf-680e-4de4-b89b-33d6eefa739d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"34acd1b1-d11c-4700-9be9-1507d93f5695","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6662a338-e456-488d-8970-2d47aeede02a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1aa8eda4e980"]}} {"level":"debug","ts":"2026-07-15T14:12:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1c2827bf-680e-4de4-b89b-33d6eefa739d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1aa8eda4e980"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6662a338-e456-488d-8970-2d47aeede02a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"34acd1b1-d11c-4700-9be9-1507d93f5695","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"27b17c6fbaa2515ff97f3a2cbe3ff5f7ab2c48295e7120c7dd303b25c8bf4f65"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:12:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c2827bf-680e-4de4-b89b-33d6eefa739d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:12:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c2827bf-680e-4de4-b89b-33d6eefa739d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:12:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c2827bf-680e-4de4-b89b-33d6eefa739d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2723e9/auth-test-model-2723e9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2723e9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:12:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1c2827bf-680e-4de4-b89b-33d6eefa739d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T14:12:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1c2827bf-680e-4de4-b89b-33d6eefa739d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T14:12:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1c2827bf-680e-4de4-b89b-33d6eefa739d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-15T14:12:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1c2827bf-680e-4de4-b89b-33d6eefa739d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T14:12:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1c2827bf-680e-4de4-b89b-33d6eefa739d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T14:12:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1105cf5a-7eb1-4374-93f8-a5b3030e4ac3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49490","PortSpecifier":{"PortValue":49490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1105cf5a-7eb1-4374-93f8-a5b3030e4ac3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-bfdd40.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T14:12:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1105cf5a-7eb1-4374-93f8-a5b3030e4ac3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49490","PortSpecifier":{"PortValue":49490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784124769,"nanos":700584569},"http":{"id":"1105cf5a-7eb1-4374-93f8-a5b3030e4ac3","method":"POST","headers":{":authority":"e2e-shared-b-bfdd40.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:12:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1105cf5a-7eb1-4374-93f8-a5b3030e4ac3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T14:12:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1105cf5a-7eb1-4374-93f8-a5b3030e4ac3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"34acd1b1-d11c-4700-9be9-1507d93f5695","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6662a338-e456-488d-8970-2d47aeede02a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1aa8eda4e980"]}} {"level":"debug","ts":"2026-07-15T14:12:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1105cf5a-7eb1-4374-93f8-a5b3030e4ac3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1aa8eda4e980"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6662a338-e456-488d-8970-2d47aeede02a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"34acd1b1-d11c-4700-9be9-1507d93f5695","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"16157c6d5824de47fcec7555dfa9e39a2617c27f18aee04c681c33bae7cc0cb8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-bfdd40.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:12:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1105cf5a-7eb1-4374-93f8-a5b3030e4ac3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:12:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1105cf5a-7eb1-4374-93f8-a5b3030e4ac3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:12:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1105cf5a-7eb1-4374-93f8-a5b3030e4ac3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-bfdd40/auth-test-model-bfdd40\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-bfdd40/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:12:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1105cf5a-7eb1-4374-93f8-a5b3030e4ac3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T14:12:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1105cf5a-7eb1-4374-93f8-a5b3030e4ac3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T14:12:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1105cf5a-7eb1-4374-93f8-a5b3030e4ac3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T14:12:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1105cf5a-7eb1-4374-93f8-a5b3030e4ac3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T14:12:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1105cf5a-7eb1-4374-93f8-a5b3030e4ac3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T14:12:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aecc1f05-3b44-4820-b7d1-ed359f212d4b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49506","PortSpecifier":{"PortValue":49506}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"aecc1f05-3b44-4820-b7d1-ed359f212d4b","method":"GET","path":"/maas-api/v1/api-keys/81c5b1f4-bd24-46fd-a4a7-3ecfd1a41f58","host":"e2e-shared-b-bfdd40.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T14:12:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aecc1f05-3b44-4820-b7d1-ed359f212d4b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49506","PortSpecifier":{"PortValue":49506}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784124769,"nanos":744239779},"http":{"id":"aecc1f05-3b44-4820-b7d1-ed359f212d4b","method":"GET","headers":{":authority":"e2e-shared-b-bfdd40.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/81c5b1f4-bd24-46fd-a4a7-3ecfd1a41f58",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:12:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"aecc1f05-3b44-4820-b7d1-ed359f212d4b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T14:12:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"aecc1f05-3b44-4820-b7d1-ed359f212d4b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"34acd1b1-d11c-4700-9be9-1507d93f5695","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6662a338-e456-488d-8970-2d47aeede02a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1aa8eda4e980"]}} {"level":"debug","ts":"2026-07-15T14:12:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"aecc1f05-3b44-4820-b7d1-ed359f212d4b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1aa8eda4e980"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6662a338-e456-488d-8970-2d47aeede02a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"34acd1b1-d11c-4700-9be9-1507d93f5695","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"16157c6d5824de47fcec7555dfa9e39a2617c27f18aee04c681c33bae7cc0cb8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-bfdd40.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/81c5b1f4-bd24-46fd-a4a7-3ecfd1a41f58",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:12:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aecc1f05-3b44-4820-b7d1-ed359f212d4b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:12:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aecc1f05-3b44-4820-b7d1-ed359f212d4b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:12:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aecc1f05-3b44-4820-b7d1-ed359f212d4b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-bfdd40/auth-test-model-bfdd40\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-bfdd40/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:12:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"aecc1f05-3b44-4820-b7d1-ed359f212d4b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T14:12:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aecc1f05-3b44-4820-b7d1-ed359f212d4b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T14:12:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aecc1f05-3b44-4820-b7d1-ed359f212d4b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T14:12:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aecc1f05-3b44-4820-b7d1-ed359f212d4b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T14:12:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aecc1f05-3b44-4820-b7d1-ed359f212d4b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T14:12:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b4f6b514-116c-4e69-a757-d192d2e08470","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:34658","PortSpecifier":{"PortValue":34658}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b4f6b514-116c-4e69-a757-d192d2e08470","method":"GET","path":"/maas-api/v1/api-keys/81c5b1f4-bd24-46fd-a4a7-3ecfd1a41f58","host":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T14:12:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b4f6b514-116c-4e69-a757-d192d2e08470","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:34658","PortSpecifier":{"PortValue":34658}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784124769,"nanos":775046260},"http":{"id":"b4f6b514-116c-4e69-a757-d192d2e08470","method":"GET","headers":{":authority":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/81c5b1f4-bd24-46fd-a4a7-3ecfd1a41f58",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:12:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b4f6b514-116c-4e69-a757-d192d2e08470","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T14:12:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b4f6b514-116c-4e69-a757-d192d2e08470","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"34acd1b1-d11c-4700-9be9-1507d93f5695","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6662a338-e456-488d-8970-2d47aeede02a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1aa8eda4e980"]}} {"level":"debug","ts":"2026-07-15T14:12:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b4f6b514-116c-4e69-a757-d192d2e08470","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1aa8eda4e980"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6662a338-e456-488d-8970-2d47aeede02a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"34acd1b1-d11c-4700-9be9-1507d93f5695","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"27b17c6fbaa2515ff97f3a2cbe3ff5f7ab2c48295e7120c7dd303b25c8bf4f65"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/81c5b1f4-bd24-46fd-a4a7-3ecfd1a41f58",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:12:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b4f6b514-116c-4e69-a757-d192d2e08470","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:12:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b4f6b514-116c-4e69-a757-d192d2e08470","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:12:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b4f6b514-116c-4e69-a757-d192d2e08470","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2723e9/auth-test-model-2723e9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2723e9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:12:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b4f6b514-116c-4e69-a757-d192d2e08470","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T14:12:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b4f6b514-116c-4e69-a757-d192d2e08470","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T14:12:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b4f6b514-116c-4e69-a757-d192d2e08470","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T14:12:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b4f6b514-116c-4e69-a757-d192d2e08470","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T14:12:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b4f6b514-116c-4e69-a757-d192d2e08470","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T14:13:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"453ec223-d5c3-4185-bd19-410b4ac375d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53866","PortSpecifier":{"PortValue":53866}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"453ec223-d5c3-4185-bd19-410b4ac375d3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T14:13:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"453ec223-d5c3-4185-bd19-410b4ac375d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53866","PortSpecifier":{"PortValue":53866}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784124787,"nanos":438164789},"http":{"id":"453ec223-d5c3-4185-bd19-410b4ac375d3","method":"POST","headers":{":authority":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:13:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"453ec223-d5c3-4185-bd19-410b4ac375d3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T14:13:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"453ec223-d5c3-4185-bd19-410b4ac375d3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"34acd1b1-d11c-4700-9be9-1507d93f5695","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6662a338-e456-488d-8970-2d47aeede02a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1aa8eda4e980"]}} {"level":"debug","ts":"2026-07-15T14:13:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"453ec223-d5c3-4185-bd19-410b4ac375d3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1aa8eda4e980"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6662a338-e456-488d-8970-2d47aeede02a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"34acd1b1-d11c-4700-9be9-1507d93f5695","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"27b17c6fbaa2515ff97f3a2cbe3ff5f7ab2c48295e7120c7dd303b25c8bf4f65"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:13:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"453ec223-d5c3-4185-bd19-410b4ac375d3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:13:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"453ec223-d5c3-4185-bd19-410b4ac375d3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:13:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"453ec223-d5c3-4185-bd19-410b4ac375d3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2723e9/auth-test-model-2723e9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2723e9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:13:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"453ec223-d5c3-4185-bd19-410b4ac375d3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T14:13:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"453ec223-d5c3-4185-bd19-410b4ac375d3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T14:13:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"453ec223-d5c3-4185-bd19-410b4ac375d3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-15T14:13:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"453ec223-d5c3-4185-bd19-410b4ac375d3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T14:13:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"453ec223-d5c3-4185-bd19-410b4ac375d3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T14:13:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d26503df-e17c-47e1-a08e-4fbfd62b9549","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49754","PortSpecifier":{"PortValue":49754}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d26503df-e17c-47e1-a08e-4fbfd62b9549","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-bfdd40.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T14:13:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d26503df-e17c-47e1-a08e-4fbfd62b9549","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49754","PortSpecifier":{"PortValue":49754}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784124787,"nanos":475151104},"http":{"id":"d26503df-e17c-47e1-a08e-4fbfd62b9549","method":"POST","headers":{":authority":"e2e-shared-b-bfdd40.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:13:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d26503df-e17c-47e1-a08e-4fbfd62b9549","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T14:13:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d26503df-e17c-47e1-a08e-4fbfd62b9549","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"34acd1b1-d11c-4700-9be9-1507d93f5695","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6662a338-e456-488d-8970-2d47aeede02a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1aa8eda4e980"]}} {"level":"debug","ts":"2026-07-15T14:13:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d26503df-e17c-47e1-a08e-4fbfd62b9549","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1aa8eda4e980"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6662a338-e456-488d-8970-2d47aeede02a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"34acd1b1-d11c-4700-9be9-1507d93f5695","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"16157c6d5824de47fcec7555dfa9e39a2617c27f18aee04c681c33bae7cc0cb8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-bfdd40.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:13:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d26503df-e17c-47e1-a08e-4fbfd62b9549","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:13:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d26503df-e17c-47e1-a08e-4fbfd62b9549","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:13:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d26503df-e17c-47e1-a08e-4fbfd62b9549","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-bfdd40/auth-test-model-bfdd40\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-bfdd40/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:13:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d26503df-e17c-47e1-a08e-4fbfd62b9549","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T14:13:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d26503df-e17c-47e1-a08e-4fbfd62b9549","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T14:13:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d26503df-e17c-47e1-a08e-4fbfd62b9549","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-15T14:13:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d26503df-e17c-47e1-a08e-4fbfd62b9549","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T14:13:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d26503df-e17c-47e1-a08e-4fbfd62b9549","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T14:13:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"39dba12b-6fe1-4c8d-85cb-637fc9ad4c5c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53880","PortSpecifier":{"PortValue":53880}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"39dba12b-6fe1-4c8d-85cb-637fc9ad4c5c","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T14:13:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"39dba12b-6fe1-4c8d-85cb-637fc9ad4c5c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53880","PortSpecifier":{"PortValue":53880}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784124787,"nanos":522421511},"http":{"id":"39dba12b-6fe1-4c8d-85cb-637fc9ad4c5c","method":"POST","headers":{":authority":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:13:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"39dba12b-6fe1-4c8d-85cb-637fc9ad4c5c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1YgCDxcI29nEqIRyA_ufXQom8jcNQLofBL4vFw967OntlaL4Y2JBm5AHfbR"} {"level":"debug","ts":"2026-07-15T14:13:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"39dba12b-6fe1-4c8d-85cb-637fc9ad4c5c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2723e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1YgCDxcI29nEqIRyA_ufXQom8jcNQLofBL4vFw967OntlaL4Y2JBm5AHfbR\"}"} {"level":"debug","ts":"2026-07-15T14:13:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"39dba12b-6fe1-4c8d-85cb-637fc9ad4c5c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2723e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4961b7c7-a780-4f21-b5a8-579f067686f6","keyName":"e2e-auth-iso-a-d8fac5","subscription":"e2e-auth-iso-e63f15","tenant":"e2e-shared-a-2723e9","userId":"4961b7c7-a780-4f21-b5a8-579f067686f6","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-15T14:13:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"39dba12b-6fe1-4c8d-85cb-637fc9ad4c5c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:13:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39dba12b-6fe1-4c8d-85cb-637fc9ad4c5c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:13:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39dba12b-6fe1-4c8d-85cb-637fc9ad4c5c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:13:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39dba12b-6fe1-4c8d-85cb-637fc9ad4c5c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2723e9/auth-test-model-2723e9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2723e9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:13:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39dba12b-6fe1-4c8d-85cb-637fc9ad4c5c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T14:13:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39dba12b-6fe1-4c8d-85cb-637fc9ad4c5c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-e63f15"} {"level":"debug","ts":"2026-07-15T14:13:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"39dba12b-6fe1-4c8d-85cb-637fc9ad4c5c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-15T14:13:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39dba12b-6fe1-4c8d-85cb-637fc9ad4c5c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T14:13:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"39dba12b-6fe1-4c8d-85cb-637fc9ad4c5c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T14:13:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"39dba12b-6fe1-4c8d-85cb-637fc9ad4c5c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T14:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ff179e4732cf79884a7b6312ea50fe28cb974a8ef36010597770932fc60798f7"} {"level":"info","ts":"2026-07-15T14:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e316c8bd3cc287c0980c2a2ae0e370031e5f506a08511b358664f124722155f5"} {"level":"info","ts":"2026-07-15T14:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b005819587b0d66ebb98eab9eaf5bde4f787c113fbc26a70f4df91d2a82b1f7d"} {"level":"info","ts":"2026-07-15T14:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b790b875dd5bde0f5ff12f34c16e551ea9994d5949c6a4f01c475bd1b8860a82"} {"level":"info","ts":"2026-07-15T14:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b67ceed084b093b589c455703a19cc242e0a3e5197dccc12cbf2efb918a593a6"} {"level":"info","ts":"2026-07-15T14:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cb19b113d034573d1f8cf25f53671ac5e3294d12971418ba7ba8f52c5509072d"} {"level":"info","ts":"2026-07-15T14:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6e50eccb285cf2e5b8b6a01c7ad7193691ae5d7cd6103da5c7a2b7f20be0c274"} {"level":"info","ts":"2026-07-15T14:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/55dde8fb0c28f78378c7687974f59bd6904187376bb1aa357804ad34cc79a78e"} {"level":"info","ts":"2026-07-15T14:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5bfa028449d7d3e5f3f252d1ff1bac7a345b5ecb73a173fbb5eb8009511ac8ee"} {"level":"info","ts":"2026-07-15T14:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/957910543d279409e3172c4fc78634940645c8582c245ab42ae27427433cf010"} {"level":"info","ts":"2026-07-15T14:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a711f26e90d0312f9c84e9a6acffac9572856f61342b077ebd29003fe772a1e3"} {"level":"info","ts":"2026-07-15T14:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9fb24b4d0c98b8d6beaf008b2ef3fb6f3da385f4ec6932e310c49ddca1f1bcad"} {"level":"info","ts":"2026-07-15T14:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/860d1f3132b94706f2f5e5467c85a97205250233c2627eed2f52e69883ae47d5"} {"level":"info","ts":"2026-07-15T14:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/19c833cdd7788c2291c05046f461dfc8606920eb0f37c9babe0eaae70680579c"} {"level":"info","ts":"2026-07-15T14:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6777df0ba400d154b56980614dde4e626de83a2c45000922df58892ac44af4d3"} {"level":"info","ts":"2026-07-15T14:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/96073f067c9366109c3b5fa4cb614e576d3cddbcadd8faf8db1799c37b1e6c89"} {"level":"debug","ts":"2026-07-15T14:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db5eaa41f637b71b5a1142e14ae4ac16735500235bb5b3aca472251dd33ef9f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:13:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:13:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db5eaa41f637b71b5a1142e14ae4ac16735500235bb5b3aca472251dd33ef9f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db5eaa41f637b71b5a1142e14ae4ac16735500235bb5b3aca472251dd33ef9f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db5eaa41f637b71b5a1142e14ae4ac16735500235bb5b3aca472251dd33ef9f8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db5eaa41f637b71b5a1142e14ae4ac16735500235bb5b3aca472251dd33ef9f8"} {"level":"debug","ts":"2026-07-15T14:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db5eaa41f637b71b5a1142e14ae4ac16735500235bb5b3aca472251dd33ef9f8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db5eaa41f637b71b5a1142e14ae4ac16735500235bb5b3aca472251dd33ef9f8"} {"level":"debug","ts":"2026-07-15T14:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db5eaa41f637b71b5a1142e14ae4ac16735500235bb5b3aca472251dd33ef9f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:13:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:13:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db5eaa41f637b71b5a1142e14ae4ac16735500235bb5b3aca472251dd33ef9f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db5eaa41f637b71b5a1142e14ae4ac16735500235bb5b3aca472251dd33ef9f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"564dbbd85ebc17cab1cd6844c85327aa55dda8db1f13842e63624f26942c7ce6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:13:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:13:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"564dbbd85ebc17cab1cd6844c85327aa55dda8db1f13842e63624f26942c7ce6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db5eaa41f637b71b5a1142e14ae4ac16735500235bb5b3aca472251dd33ef9f8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/564dbbd85ebc17cab1cd6844c85327aa55dda8db1f13842e63624f26942c7ce6"} {"level":"debug","ts":"2026-07-15T14:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"564dbbd85ebc17cab1cd6844c85327aa55dda8db1f13842e63624f26942c7ce6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:13:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:13:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["564dbbd85ebc17cab1cd6844c85327aa55dda8db1f13842e63624f26942c7ce6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"564dbbd85ebc17cab1cd6844c85327aa55dda8db1f13842e63624f26942c7ce6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"564dbbd85ebc17cab1cd6844c85327aa55dda8db1f13842e63624f26942c7ce6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:13:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:13:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["564dbbd85ebc17cab1cd6844c85327aa55dda8db1f13842e63624f26942c7ce6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db5eaa41f637b71b5a1142e14ae4ac16735500235bb5b3aca472251dd33ef9f8"} {"level":"error","ts":"2026-07-15T14:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"564dbbd85ebc17cab1cd6844c85327aa55dda8db1f13842e63624f26942c7ce6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"564dbbd85ebc17cab1cd6844c85327aa55dda8db1f13842e63624f26942c7ce6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T14:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"564dbbd85ebc17cab1cd6844c85327aa55dda8db1f13842e63624f26942c7ce6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:13:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:13:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"564dbbd85ebc17cab1cd6844c85327aa55dda8db1f13842e63624f26942c7ce6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"564dbbd85ebc17cab1cd6844c85327aa55dda8db1f13842e63624f26942c7ce6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/564dbbd85ebc17cab1cd6844c85327aa55dda8db1f13842e63624f26942c7ce6"} {"level":"debug","ts":"2026-07-15T14:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"564dbbd85ebc17cab1cd6844c85327aa55dda8db1f13842e63624f26942c7ce6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/564dbbd85ebc17cab1cd6844c85327aa55dda8db1f13842e63624f26942c7ce6"} {"level":"debug","ts":"2026-07-15T14:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"564dbbd85ebc17cab1cd6844c85327aa55dda8db1f13842e63624f26942c7ce6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:13:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:13:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["564dbbd85ebc17cab1cd6844c85327aa55dda8db1f13842e63624f26942c7ce6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"564dbbd85ebc17cab1cd6844c85327aa55dda8db1f13842e63624f26942c7ce6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"564dbbd85ebc17cab1cd6844c85327aa55dda8db1f13842e63624f26942c7ce6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/564dbbd85ebc17cab1cd6844c85327aa55dda8db1f13842e63624f26942c7ce6"} {"level":"debug","ts":"2026-07-15T14:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d5c92848bd08c7c701ebbd0c169c5854dfac05e4eda09a98a0567de78ba1e7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:13:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:13:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d5c92848bd08c7c701ebbd0c169c5854dfac05e4eda09a98a0567de78ba1e7f"} {"level":"info","ts":"2026-07-15T14:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d5c92848bd08c7c701ebbd0c169c5854dfac05e4eda09a98a0567de78ba1e7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d5c92848bd08c7c701ebbd0c169c5854dfac05e4eda09a98a0567de78ba1e7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d5c92848bd08c7c701ebbd0c169c5854dfac05e4eda09a98a0567de78ba1e7f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d5c92848bd08c7c701ebbd0c169c5854dfac05e4eda09a98a0567de78ba1e7f"} {"level":"debug","ts":"2026-07-15T14:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d5c92848bd08c7c701ebbd0c169c5854dfac05e4eda09a98a0567de78ba1e7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:13:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:13:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d5c92848bd08c7c701ebbd0c169c5854dfac05e4eda09a98a0567de78ba1e7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d5c92848bd08c7c701ebbd0c169c5854dfac05e4eda09a98a0567de78ba1e7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d5c92848bd08c7c701ebbd0c169c5854dfac05e4eda09a98a0567de78ba1e7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:13:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:13:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d5c92848bd08c7c701ebbd0c169c5854dfac05e4eda09a98a0567de78ba1e7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d5c92848bd08c7c701ebbd0c169c5854dfac05e4eda09a98a0567de78ba1e7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d5c92848bd08c7c701ebbd0c169c5854dfac05e4eda09a98a0567de78ba1e7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d5c92848bd08c7c701ebbd0c169c5854dfac05e4eda09a98a0567de78ba1e7f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d5c92848bd08c7c701ebbd0c169c5854dfac05e4eda09a98a0567de78ba1e7f"} {"level":"debug","ts":"2026-07-15T14:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d5c92848bd08c7c701ebbd0c169c5854dfac05e4eda09a98a0567de78ba1e7f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:13:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d5c92848bd08c7c701ebbd0c169c5854dfac05e4eda09a98a0567de78ba1e7f"} {"level":"debug","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0aaf4e7eed45f8601be4d983c1e98e5cfa3f940979703f2e1242ab59ee9165e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:13:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:13:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0aaf4e7eed45f8601be4d983c1e98e5cfa3f940979703f2e1242ab59ee9165e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0aaf4e7eed45f8601be4d983c1e98e5cfa3f940979703f2e1242ab59ee9165e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0aaf4e7eed45f8601be4d983c1e98e5cfa3f940979703f2e1242ab59ee9165e"} {"level":"debug","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0aaf4e7eed45f8601be4d983c1e98e5cfa3f940979703f2e1242ab59ee9165e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d5c92848bd08c7c701ebbd0c169c5854dfac05e4eda09a98a0567de78ba1e7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:13:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:13:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d5c92848bd08c7c701ebbd0c169c5854dfac05e4eda09a98a0567de78ba1e7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0aaf4e7eed45f8601be4d983c1e98e5cfa3f940979703f2e1242ab59ee9165e"} {"level":"info","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d5c92848bd08c7c701ebbd0c169c5854dfac05e4eda09a98a0567de78ba1e7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0aaf4e7eed45f8601be4d983c1e98e5cfa3f940979703f2e1242ab59ee9165e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:13:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:13:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0aaf4e7eed45f8601be4d983c1e98e5cfa3f940979703f2e1242ab59ee9165e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0aaf4e7eed45f8601be4d983c1e98e5cfa3f940979703f2e1242ab59ee9165e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d5c92848bd08c7c701ebbd0c169c5854dfac05e4eda09a98a0567de78ba1e7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:13:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:13:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d5c92848bd08c7c701ebbd0c169c5854dfac05e4eda09a98a0567de78ba1e7f"} {"level":"info","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d5c92848bd08c7c701ebbd0c169c5854dfac05e4eda09a98a0567de78ba1e7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0aaf4e7eed45f8601be4d983c1e98e5cfa3f940979703f2e1242ab59ee9165e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:13:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:13:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0aaf4e7eed45f8601be4d983c1e98e5cfa3f940979703f2e1242ab59ee9165e"} {"level":"info","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0aaf4e7eed45f8601be4d983c1e98e5cfa3f940979703f2e1242ab59ee9165e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d5c92848bd08c7c701ebbd0c169c5854dfac05e4eda09a98a0567de78ba1e7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0aaf4e7eed45f8601be4d983c1e98e5cfa3f940979703f2e1242ab59ee9165e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:13:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:13:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0aaf4e7eed45f8601be4d983c1e98e5cfa3f940979703f2e1242ab59ee9165e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0aaf4e7eed45f8601be4d983c1e98e5cfa3f940979703f2e1242ab59ee9165e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40f1a9295642d20a501a932cd99f1f9d60f3ba369dc9d11911f8ba75910aaa3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:13:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:13:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d5c92848bd08c7c701ebbd0c169c5854dfac05e4eda09a98a0567de78ba1e7f"} {"level":"info","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40f1a9295642d20a501a932cd99f1f9d60f3ba369dc9d11911f8ba75910aaa3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d5c92848bd08c7c701ebbd0c169c5854dfac05e4eda09a98a0567de78ba1e7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:13:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:13:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d5c92848bd08c7c701ebbd0c169c5854dfac05e4eda09a98a0567de78ba1e7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0aaf4e7eed45f8601be4d983c1e98e5cfa3f940979703f2e1242ab59ee9165e"} {"level":"info","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d5c92848bd08c7c701ebbd0c169c5854dfac05e4eda09a98a0567de78ba1e7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0aaf4e7eed45f8601be4d983c1e98e5cfa3f940979703f2e1242ab59ee9165e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40f1a9295642d20a501a932cd99f1f9d60f3ba369dc9d11911f8ba75910aaa3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:13:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:13:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40f1a9295642d20a501a932cd99f1f9d60f3ba369dc9d11911f8ba75910aaa3d"} {"level":"info","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40f1a9295642d20a501a932cd99f1f9d60f3ba369dc9d11911f8ba75910aaa3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d5c92848bd08c7c701ebbd0c169c5854dfac05e4eda09a98a0567de78ba1e7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:13:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:13:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d5c92848bd08c7c701ebbd0c169c5854dfac05e4eda09a98a0567de78ba1e7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40f1a9295642d20a501a932cd99f1f9d60f3ba369dc9d11911f8ba75910aaa3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:13:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:13:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40f1a9295642d20a501a932cd99f1f9d60f3ba369dc9d11911f8ba75910aaa3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d5c92848bd08c7c701ebbd0c169c5854dfac05e4eda09a98a0567de78ba1e7f"} {"level":"info","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40f1a9295642d20a501a932cd99f1f9d60f3ba369dc9d11911f8ba75910aaa3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d5c92848bd08c7c701ebbd0c169c5854dfac05e4eda09a98a0567de78ba1e7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:13:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:13:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d5c92848bd08c7c701ebbd0c169c5854dfac05e4eda09a98a0567de78ba1e7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40f1a9295642d20a501a932cd99f1f9d60f3ba369dc9d11911f8ba75910aaa3d"} {"level":"info","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d5c92848bd08c7c701ebbd0c169c5854dfac05e4eda09a98a0567de78ba1e7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40f1a9295642d20a501a932cd99f1f9d60f3ba369dc9d11911f8ba75910aaa3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d5c92848bd08c7c701ebbd0c169c5854dfac05e4eda09a98a0567de78ba1e7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:13:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:13:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d5c92848bd08c7c701ebbd0c169c5854dfac05e4eda09a98a0567de78ba1e7f"} {"level":"info","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40f1a9295642d20a501a932cd99f1f9d60f3ba369dc9d11911f8ba75910aaa3d"} {"level":"info","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d5c92848bd08c7c701ebbd0c169c5854dfac05e4eda09a98a0567de78ba1e7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d5c92848bd08c7c701ebbd0c169c5854dfac05e4eda09a98a0567de78ba1e7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d5c92848bd08c7c701ebbd0c169c5854dfac05e4eda09a98a0567de78ba1e7f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d5c92848bd08c7c701ebbd0c169c5854dfac05e4eda09a98a0567de78ba1e7f"} {"level":"debug","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d5c92848bd08c7c701ebbd0c169c5854dfac05e4eda09a98a0567de78ba1e7f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d5c92848bd08c7c701ebbd0c169c5854dfac05e4eda09a98a0567de78ba1e7f"} {"level":"debug","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d5c92848bd08c7c701ebbd0c169c5854dfac05e4eda09a98a0567de78ba1e7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:13:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:13:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d5c92848bd08c7c701ebbd0c169c5854dfac05e4eda09a98a0567de78ba1e7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a2477f350180000badbfc39f4bdc5604aa384c1969bdb8add633a035bbd7bca"} {"level":"info","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d5c92848bd08c7c701ebbd0c169c5854dfac05e4eda09a98a0567de78ba1e7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a2477f350180000badbfc39f4bdc5604aa384c1969bdb8add633a035bbd7bca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:13:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:13:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a2477f350180000badbfc39f4bdc5604aa384c1969bdb8add633a035bbd7bca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d5c92848bd08c7c701ebbd0c169c5854dfac05e4eda09a98a0567de78ba1e7f"} {"level":"info","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a2477f350180000badbfc39f4bdc5604aa384c1969bdb8add633a035bbd7bca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d5c92848bd08c7c701ebbd0c169c5854dfac05e4eda09a98a0567de78ba1e7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a2477f350180000badbfc39f4bdc5604aa384c1969bdb8add633a035bbd7bca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:13:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:13:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a2477f350180000badbfc39f4bdc5604aa384c1969bdb8add633a035bbd7bca"} {"level":"info","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a2477f350180000badbfc39f4bdc5604aa384c1969bdb8add633a035bbd7bca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a2477f350180000badbfc39f4bdc5604aa384c1969bdb8add633a035bbd7bca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a2477f350180000badbfc39f4bdc5604aa384c1969bdb8add633a035bbd7bca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a2477f350180000badbfc39f4bdc5604aa384c1969bdb8add633a035bbd7bca"} {"level":"debug","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a2477f350180000badbfc39f4bdc5604aa384c1969bdb8add633a035bbd7bca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:13:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:13:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a2477f350180000badbfc39f4bdc5604aa384c1969bdb8add633a035bbd7bca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a2477f350180000badbfc39f4bdc5604aa384c1969bdb8add633a035bbd7bca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a2477f350180000badbfc39f4bdc5604aa384c1969bdb8add633a035bbd7bca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:13:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:13:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a2477f350180000badbfc39f4bdc5604aa384c1969bdb8add633a035bbd7bca"} {"level":"info","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a2477f350180000badbfc39f4bdc5604aa384c1969bdb8add633a035bbd7bca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a2477f350180000badbfc39f4bdc5604aa384c1969bdb8add633a035bbd7bca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a2477f350180000badbfc39f4bdc5604aa384c1969bdb8add633a035bbd7bca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a2477f350180000badbfc39f4bdc5604aa384c1969bdb8add633a035bbd7bca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a2477f350180000badbfc39f4bdc5604aa384c1969bdb8add633a035bbd7bca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a2477f350180000badbfc39f4bdc5604aa384c1969bdb8add633a035bbd7bca"} {"level":"debug","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a2477f350180000badbfc39f4bdc5604aa384c1969bdb8add633a035bbd7bca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:13:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:13:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a2477f350180000badbfc39f4bdc5604aa384c1969bdb8add633a035bbd7bca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a2477f350180000badbfc39f4bdc5604aa384c1969bdb8add633a035bbd7bca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a2477f350180000badbfc39f4bdc5604aa384c1969bdb8add633a035bbd7bca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:13:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:13:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a2477f350180000badbfc39f4bdc5604aa384c1969bdb8add633a035bbd7bca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a2477f350180000badbfc39f4bdc5604aa384c1969bdb8add633a035bbd7bca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a2477f350180000badbfc39f4bdc5604aa384c1969bdb8add633a035bbd7bca"} {"level":"debug","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a2477f350180000badbfc39f4bdc5604aa384c1969bdb8add633a035bbd7bca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a2477f350180000badbfc39f4bdc5604aa384c1969bdb8add633a035bbd7bca"} {"level":"debug","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a2477f350180000badbfc39f4bdc5604aa384c1969bdb8add633a035bbd7bca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:13:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:13:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a2477f350180000badbfc39f4bdc5604aa384c1969bdb8add633a035bbd7bca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a2477f350180000badbfc39f4bdc5604aa384c1969bdb8add633a035bbd7bca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a2477f350180000badbfc39f4bdc5604aa384c1969bdb8add633a035bbd7bca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:13:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:13:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a2477f350180000badbfc39f4bdc5604aa384c1969bdb8add633a035bbd7bca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a2477f350180000badbfc39f4bdc5604aa384c1969bdb8add633a035bbd7bca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a2477f350180000badbfc39f4bdc5604aa384c1969bdb8add633a035bbd7bca"} {"level":"debug","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a2477f350180000badbfc39f4bdc5604aa384c1969bdb8add633a035bbd7bca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a2477f350180000badbfc39f4bdc5604aa384c1969bdb8add633a035bbd7bca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a2477f350180000badbfc39f4bdc5604aa384c1969bdb8add633a035bbd7bca"} {"level":"debug","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d79a0b2e92c7534b0f681776b629348644e26f3debbdd1b980b23aeaac02f73c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:13:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:13:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d79a0b2e92c7534b0f681776b629348644e26f3debbdd1b980b23aeaac02f73c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d79a0b2e92c7534b0f681776b629348644e26f3debbdd1b980b23aeaac02f73c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d79a0b2e92c7534b0f681776b629348644e26f3debbdd1b980b23aeaac02f73c"} {"level":"debug","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d79a0b2e92c7534b0f681776b629348644e26f3debbdd1b980b23aeaac02f73c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a2477f350180000badbfc39f4bdc5604aa384c1969bdb8add633a035bbd7bca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:13:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:13:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a2477f350180000badbfc39f4bdc5604aa384c1969bdb8add633a035bbd7bca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d79a0b2e92c7534b0f681776b629348644e26f3debbdd1b980b23aeaac02f73c"} {"level":"info","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a2477f350180000badbfc39f4bdc5604aa384c1969bdb8add633a035bbd7bca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d79a0b2e92c7534b0f681776b629348644e26f3debbdd1b980b23aeaac02f73c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:13:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:13:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d79a0b2e92c7534b0f681776b629348644e26f3debbdd1b980b23aeaac02f73c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d79a0b2e92c7534b0f681776b629348644e26f3debbdd1b980b23aeaac02f73c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a2477f350180000badbfc39f4bdc5604aa384c1969bdb8add633a035bbd7bca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:13:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:13:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a2477f350180000badbfc39f4bdc5604aa384c1969bdb8add633a035bbd7bca"} {"level":"info","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a2477f350180000badbfc39f4bdc5604aa384c1969bdb8add633a035bbd7bca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d79a0b2e92c7534b0f681776b629348644e26f3debbdd1b980b23aeaac02f73c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:13:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:13:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d79a0b2e92c7534b0f681776b629348644e26f3debbdd1b980b23aeaac02f73c"} {"level":"info","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d79a0b2e92c7534b0f681776b629348644e26f3debbdd1b980b23aeaac02f73c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a2477f350180000badbfc39f4bdc5604aa384c1969bdb8add633a035bbd7bca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d79a0b2e92c7534b0f681776b629348644e26f3debbdd1b980b23aeaac02f73c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:13:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:13:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d79a0b2e92c7534b0f681776b629348644e26f3debbdd1b980b23aeaac02f73c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d79a0b2e92c7534b0f681776b629348644e26f3debbdd1b980b23aeaac02f73c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a2477f350180000badbfc39f4bdc5604aa384c1969bdb8add633a035bbd7bca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"881db3bce91d01abde883e3c90bdead925a2bfefe1a7234864a5734765aa425a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:13:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:13:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a2477f350180000badbfc39f4bdc5604aa384c1969bdb8add633a035bbd7bca"} {"level":"info","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d79a0b2e92c7534b0f681776b629348644e26f3debbdd1b980b23aeaac02f73c"} {"level":"info","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"881db3bce91d01abde883e3c90bdead925a2bfefe1a7234864a5734765aa425a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d79a0b2e92c7534b0f681776b629348644e26f3debbdd1b980b23aeaac02f73c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a2477f350180000badbfc39f4bdc5604aa384c1969bdb8add633a035bbd7bca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:13:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:13:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a2477f350180000badbfc39f4bdc5604aa384c1969bdb8add633a035bbd7bca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/881db3bce91d01abde883e3c90bdead925a2bfefe1a7234864a5734765aa425a"} {"level":"info","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a2477f350180000badbfc39f4bdc5604aa384c1969bdb8add633a035bbd7bca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"881db3bce91d01abde883e3c90bdead925a2bfefe1a7234864a5734765aa425a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:13:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:13:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["881db3bce91d01abde883e3c90bdead925a2bfefe1a7234864a5734765aa425a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d79a0b2e92c7534b0f681776b629348644e26f3debbdd1b980b23aeaac02f73c"} {"level":"info","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"881db3bce91d01abde883e3c90bdead925a2bfefe1a7234864a5734765aa425a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a2477f350180000badbfc39f4bdc5604aa384c1969bdb8add633a035bbd7bca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"881db3bce91d01abde883e3c90bdead925a2bfefe1a7234864a5734765aa425a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:13:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:13:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"881db3bce91d01abde883e3c90bdead925a2bfefe1a7234864a5734765aa425a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"881db3bce91d01abde883e3c90bdead925a2bfefe1a7234864a5734765aa425a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/881db3bce91d01abde883e3c90bdead925a2bfefe1a7234864a5734765aa425a"} {"level":"debug","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"881db3bce91d01abde883e3c90bdead925a2bfefe1a7234864a5734765aa425a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:13:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:13:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["881db3bce91d01abde883e3c90bdead925a2bfefe1a7234864a5734765aa425a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"881db3bce91d01abde883e3c90bdead925a2bfefe1a7234864a5734765aa425a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"881db3bce91d01abde883e3c90bdead925a2bfefe1a7234864a5734765aa425a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a2477f350180000badbfc39f4bdc5604aa384c1969bdb8add633a035bbd7bca"} {"level":"info","ts":"2026-07-15T14:13:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/881db3bce91d01abde883e3c90bdead925a2bfefe1a7234864a5734765aa425a"} {"level":"debug","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bd5034d8d930d2d9ef2ce85e5b849eb587d8592953241f59e482441918cacce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:14:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:14:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bd5034d8d930d2d9ef2ce85e5b849eb587d8592953241f59e482441918cacce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bd5034d8d930d2d9ef2ce85e5b849eb587d8592953241f59e482441918cacce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bd5034d8d930d2d9ef2ce85e5b849eb587d8592953241f59e482441918cacce"} {"level":"debug","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bd5034d8d930d2d9ef2ce85e5b849eb587d8592953241f59e482441918cacce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bd5034d8d930d2d9ef2ce85e5b849eb587d8592953241f59e482441918cacce"} {"level":"debug","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bd5034d8d930d2d9ef2ce85e5b849eb587d8592953241f59e482441918cacce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:14:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:14:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7bd5034d8d930d2d9ef2ce85e5b849eb587d8592953241f59e482441918cacce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bd5034d8d930d2d9ef2ce85e5b849eb587d8592953241f59e482441918cacce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bd5034d8d930d2d9ef2ce85e5b849eb587d8592953241f59e482441918cacce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bd5034d8d930d2d9ef2ce85e5b849eb587d8592953241f59e482441918cacce"} {"level":"debug","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7230a5925eeb9c649185280467b0f3175673f8612d3dd0f19366596216bec260","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:14:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:14:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7230a5925eeb9c649185280467b0f3175673f8612d3dd0f19366596216bec260"} {"level":"info","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7230a5925eeb9c649185280467b0f3175673f8612d3dd0f19366596216bec260","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7230a5925eeb9c649185280467b0f3175673f8612d3dd0f19366596216bec260","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:14:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:14:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7230a5925eeb9c649185280467b0f3175673f8612d3dd0f19366596216bec260"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7230a5925eeb9c649185280467b0f3175673f8612d3dd0f19366596216bec260","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7230a5925eeb9c649185280467b0f3175673f8612d3dd0f19366596216bec260\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7230a5925eeb9c649185280467b0f3175673f8612d3dd0f19366596216bec260","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:14:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:14:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7230a5925eeb9c649185280467b0f3175673f8612d3dd0f19366596216bec260"} {"level":"info","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7230a5925eeb9c649185280467b0f3175673f8612d3dd0f19366596216bec260","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7230a5925eeb9c649185280467b0f3175673f8612d3dd0f19366596216bec260","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7230a5925eeb9c649185280467b0f3175673f8612d3dd0f19366596216bec260"} {"level":"debug","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7230a5925eeb9c649185280467b0f3175673f8612d3dd0f19366596216bec260","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:14:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:14:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7230a5925eeb9c649185280467b0f3175673f8612d3dd0f19366596216bec260"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7230a5925eeb9c649185280467b0f3175673f8612d3dd0f19366596216bec260","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4183ff93006dc5fef73bbd57d585fac35552cae6b4ca3fc11d5591c5f13cedf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:14:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:14:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4183ff93006dc5fef73bbd57d585fac35552cae6b4ca3fc11d5591c5f13cedf2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7230a5925eeb9c649185280467b0f3175673f8612d3dd0f19366596216bec260","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4183ff93006dc5fef73bbd57d585fac35552cae6b4ca3fc11d5591c5f13cedf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:14:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:14:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4183ff93006dc5fef73bbd57d585fac35552cae6b4ca3fc11d5591c5f13cedf2"} {"level":"info","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4183ff93006dc5fef73bbd57d585fac35552cae6b4ca3fc11d5591c5f13cedf2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4183ff93006dc5fef73bbd57d585fac35552cae6b4ca3fc11d5591c5f13cedf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:14:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:14:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4183ff93006dc5fef73bbd57d585fac35552cae6b4ca3fc11d5591c5f13cedf2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7230a5925eeb9c649185280467b0f3175673f8612d3dd0f19366596216bec260"} {"level":"error","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4183ff93006dc5fef73bbd57d585fac35552cae6b4ca3fc11d5591c5f13cedf2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4183ff93006dc5fef73bbd57d585fac35552cae6b4ca3fc11d5591c5f13cedf2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4183ff93006dc5fef73bbd57d585fac35552cae6b4ca3fc11d5591c5f13cedf2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4183ff93006dc5fef73bbd57d585fac35552cae6b4ca3fc11d5591c5f13cedf2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4183ff93006dc5fef73bbd57d585fac35552cae6b4ca3fc11d5591c5f13cedf2"} {"level":"debug","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4183ff93006dc5fef73bbd57d585fac35552cae6b4ca3fc11d5591c5f13cedf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:14:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:14:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4183ff93006dc5fef73bbd57d585fac35552cae6b4ca3fc11d5591c5f13cedf2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4183ff93006dc5fef73bbd57d585fac35552cae6b4ca3fc11d5591c5f13cedf2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92768211b83a3d76065a4e8987c864f3370d98987fbd6f0323406c892fa79ec3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:14:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:14:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92768211b83a3d76065a4e8987c864f3370d98987fbd6f0323406c892fa79ec3"} {"level":"info","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92768211b83a3d76065a4e8987c864f3370d98987fbd6f0323406c892fa79ec3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4183ff93006dc5fef73bbd57d585fac35552cae6b4ca3fc11d5591c5f13cedf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:14:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:14:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4183ff93006dc5fef73bbd57d585fac35552cae6b4ca3fc11d5591c5f13cedf2"} {"level":"info","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4183ff93006dc5fef73bbd57d585fac35552cae6b4ca3fc11d5591c5f13cedf2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92768211b83a3d76065a4e8987c864f3370d98987fbd6f0323406c892fa79ec3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4183ff93006dc5fef73bbd57d585fac35552cae6b4ca3fc11d5591c5f13cedf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:14:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:14:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4183ff93006dc5fef73bbd57d585fac35552cae6b4ca3fc11d5591c5f13cedf2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92768211b83a3d76065a4e8987c864f3370d98987fbd6f0323406c892fa79ec3"} {"level":"info","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4183ff93006dc5fef73bbd57d585fac35552cae6b4ca3fc11d5591c5f13cedf2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92768211b83a3d76065a4e8987c864f3370d98987fbd6f0323406c892fa79ec3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:14:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:14:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["92768211b83a3d76065a4e8987c864f3370d98987fbd6f0323406c892fa79ec3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92768211b83a3d76065a4e8987c864f3370d98987fbd6f0323406c892fa79ec3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4183ff93006dc5fef73bbd57d585fac35552cae6b4ca3fc11d5591c5f13cedf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:14:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:14:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4183ff93006dc5fef73bbd57d585fac35552cae6b4ca3fc11d5591c5f13cedf2"} {"level":"info","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4183ff93006dc5fef73bbd57d585fac35552cae6b4ca3fc11d5591c5f13cedf2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92768211b83a3d76065a4e8987c864f3370d98987fbd6f0323406c892fa79ec3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:14:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:14:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92768211b83a3d76065a4e8987c864f3370d98987fbd6f0323406c892fa79ec3"} {"level":"info","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92768211b83a3d76065a4e8987c864f3370d98987fbd6f0323406c892fa79ec3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f1b06cda9ff3f012a7853d8f2de931bae5a43dd7ddc0874ec1ae0e4dd71f280","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:14:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:14:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4183ff93006dc5fef73bbd57d585fac35552cae6b4ca3fc11d5591c5f13cedf2"} {"level":"info","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f1b06cda9ff3f012a7853d8f2de931bae5a43dd7ddc0874ec1ae0e4dd71f280","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4183ff93006dc5fef73bbd57d585fac35552cae6b4ca3fc11d5591c5f13cedf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:14:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:14:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4183ff93006dc5fef73bbd57d585fac35552cae6b4ca3fc11d5591c5f13cedf2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4183ff93006dc5fef73bbd57d585fac35552cae6b4ca3fc11d5591c5f13cedf2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92768211b83a3d76065a4e8987c864f3370d98987fbd6f0323406c892fa79ec3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:14:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:14:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["92768211b83a3d76065a4e8987c864f3370d98987fbd6f0323406c892fa79ec3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f1b06cda9ff3f012a7853d8f2de931bae5a43dd7ddc0874ec1ae0e4dd71f280"} {"level":"info","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92768211b83a3d76065a4e8987c864f3370d98987fbd6f0323406c892fa79ec3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f1b06cda9ff3f012a7853d8f2de931bae5a43dd7ddc0874ec1ae0e4dd71f280","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:14:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:14:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f1b06cda9ff3f012a7853d8f2de931bae5a43dd7ddc0874ec1ae0e4dd71f280"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92768211b83a3d76065a4e8987c864f3370d98987fbd6f0323406c892fa79ec3"} {"level":"info","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f1b06cda9ff3f012a7853d8f2de931bae5a43dd7ddc0874ec1ae0e4dd71f280","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4183ff93006dc5fef73bbd57d585fac35552cae6b4ca3fc11d5591c5f13cedf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:14:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:14:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4183ff93006dc5fef73bbd57d585fac35552cae6b4ca3fc11d5591c5f13cedf2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92768211b83a3d76065a4e8987c864f3370d98987fbd6f0323406c892fa79ec3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f1b06cda9ff3f012a7853d8f2de931bae5a43dd7ddc0874ec1ae0e4dd71f280","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4183ff93006dc5fef73bbd57d585fac35552cae6b4ca3fc11d5591c5f13cedf2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4183ff93006dc5fef73bbd57d585fac35552cae6b4ca3fc11d5591c5f13cedf2"} {"level":"debug","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4183ff93006dc5fef73bbd57d585fac35552cae6b4ca3fc11d5591c5f13cedf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:14:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:14:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4183ff93006dc5fef73bbd57d585fac35552cae6b4ca3fc11d5591c5f13cedf2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4183ff93006dc5fef73bbd57d585fac35552cae6b4ca3fc11d5591c5f13cedf2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f1b06cda9ff3f012a7853d8f2de931bae5a43dd7ddc0874ec1ae0e4dd71f280"} {"level":"debug","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4183ff93006dc5fef73bbd57d585fac35552cae6b4ca3fc11d5591c5f13cedf2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92768211b83a3d76065a4e8987c864f3370d98987fbd6f0323406c892fa79ec3"} {"level":"info","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4183ff93006dc5fef73bbd57d585fac35552cae6b4ca3fc11d5591c5f13cedf2"} {"level":"debug","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83444e12330a6f1aba7fafa14bca324e0b25016050b9697cf29ef6a43dea82a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:14:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:14:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83444e12330a6f1aba7fafa14bca324e0b25016050b9697cf29ef6a43dea82a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83444e12330a6f1aba7fafa14bca324e0b25016050b9697cf29ef6a43dea82a3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83444e12330a6f1aba7fafa14bca324e0b25016050b9697cf29ef6a43dea82a3"} {"level":"debug","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83444e12330a6f1aba7fafa14bca324e0b25016050b9697cf29ef6a43dea82a3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83444e12330a6f1aba7fafa14bca324e0b25016050b9697cf29ef6a43dea82a3"} {"level":"debug","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83444e12330a6f1aba7fafa14bca324e0b25016050b9697cf29ef6a43dea82a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:14:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:14:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83444e12330a6f1aba7fafa14bca324e0b25016050b9697cf29ef6a43dea82a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83444e12330a6f1aba7fafa14bca324e0b25016050b9697cf29ef6a43dea82a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83444e12330a6f1aba7fafa14bca324e0b25016050b9697cf29ef6a43dea82a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:14:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:14:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:14:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83444e12330a6f1aba7fafa14bca324e0b25016050b9697cf29ef6a43dea82a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83444e12330a6f1aba7fafa14bca324e0b25016050b9697cf29ef6a43dea82a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83444e12330a6f1aba7fafa14bca324e0b25016050b9697cf29ef6a43dea82a3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:14:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83444e12330a6f1aba7fafa14bca324e0b25016050b9697cf29ef6a43dea82a3"} {"level":"debug","ts":"2026-07-15T14:14:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83444e12330a6f1aba7fafa14bca324e0b25016050b9697cf29ef6a43dea82a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"192b71ccd9de5f5b25a301bcf3040f57a35ca4fbcb5c4b9b09541331976ee35a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:14:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:14:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:14:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83444e12330a6f1aba7fafa14bca324e0b25016050b9697cf29ef6a43dea82a3"} {"level":"info","ts":"2026-07-15T14:14:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"192b71ccd9de5f5b25a301bcf3040f57a35ca4fbcb5c4b9b09541331976ee35a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"192b71ccd9de5f5b25a301bcf3040f57a35ca4fbcb5c4b9b09541331976ee35a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:14:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:14:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:14:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/192b71ccd9de5f5b25a301bcf3040f57a35ca4fbcb5c4b9b09541331976ee35a"} {"level":"info","ts":"2026-07-15T14:14:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"192b71ccd9de5f5b25a301bcf3040f57a35ca4fbcb5c4b9b09541331976ee35a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"192b71ccd9de5f5b25a301bcf3040f57a35ca4fbcb5c4b9b09541331976ee35a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:14:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:14:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:14:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/192b71ccd9de5f5b25a301bcf3040f57a35ca4fbcb5c4b9b09541331976ee35a"} {"level":"error","ts":"2026-07-15T14:14:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"192b71ccd9de5f5b25a301bcf3040f57a35ca4fbcb5c4b9b09541331976ee35a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"192b71ccd9de5f5b25a301bcf3040f57a35ca4fbcb5c4b9b09541331976ee35a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T14:14:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83444e12330a6f1aba7fafa14bca324e0b25016050b9697cf29ef6a43dea82a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:14:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:14:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83444e12330a6f1aba7fafa14bca324e0b25016050b9697cf29ef6a43dea82a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:14:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83444e12330a6f1aba7fafa14bca324e0b25016050b9697cf29ef6a43dea82a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"192b71ccd9de5f5b25a301bcf3040f57a35ca4fbcb5c4b9b09541331976ee35a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83444e12330a6f1aba7fafa14bca324e0b25016050b9697cf29ef6a43dea82a3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:14:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/192b71ccd9de5f5b25a301bcf3040f57a35ca4fbcb5c4b9b09541331976ee35a"} {"level":"debug","ts":"2026-07-15T14:14:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e8a9f8732a8aa73be0cc3b836caca3caa777251e5a90217a31fed6fadfb7cbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:14:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:14:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:14:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83444e12330a6f1aba7fafa14bca324e0b25016050b9697cf29ef6a43dea82a3"} {"level":"info","ts":"2026-07-15T14:14:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e8a9f8732a8aa73be0cc3b836caca3caa777251e5a90217a31fed6fadfb7cbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"192b71ccd9de5f5b25a301bcf3040f57a35ca4fbcb5c4b9b09541331976ee35a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:14:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:14:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["192b71ccd9de5f5b25a301bcf3040f57a35ca4fbcb5c4b9b09541331976ee35a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:14:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e8a9f8732a8aa73be0cc3b836caca3caa777251e5a90217a31fed6fadfb7cbd"} {"level":"info","ts":"2026-07-15T14:14:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"192b71ccd9de5f5b25a301bcf3040f57a35ca4fbcb5c4b9b09541331976ee35a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e8a9f8732a8aa73be0cc3b836caca3caa777251e5a90217a31fed6fadfb7cbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:14:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:14:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:14:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e8a9f8732a8aa73be0cc3b836caca3caa777251e5a90217a31fed6fadfb7cbd"} {"level":"info","ts":"2026-07-15T14:14:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e8a9f8732a8aa73be0cc3b836caca3caa777251e5a90217a31fed6fadfb7cbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"192b71ccd9de5f5b25a301bcf3040f57a35ca4fbcb5c4b9b09541331976ee35a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:14:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:14:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:14:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"192b71ccd9de5f5b25a301bcf3040f57a35ca4fbcb5c4b9b09541331976ee35a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e8a9f8732a8aa73be0cc3b836caca3caa777251e5a90217a31fed6fadfb7cbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:14:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:14:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e8a9f8732a8aa73be0cc3b836caca3caa777251e5a90217a31fed6fadfb7cbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:14:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/192b71ccd9de5f5b25a301bcf3040f57a35ca4fbcb5c4b9b09541331976ee35a"} {"level":"info","ts":"2026-07-15T14:14:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e8a9f8732a8aa73be0cc3b836caca3caa777251e5a90217a31fed6fadfb7cbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"192b71ccd9de5f5b25a301bcf3040f57a35ca4fbcb5c4b9b09541331976ee35a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:14:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:14:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["192b71ccd9de5f5b25a301bcf3040f57a35ca4fbcb5c4b9b09541331976ee35a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:14:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e8a9f8732a8aa73be0cc3b836caca3caa777251e5a90217a31fed6fadfb7cbd"} {"level":"info","ts":"2026-07-15T14:14:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"192b71ccd9de5f5b25a301bcf3040f57a35ca4fbcb5c4b9b09541331976ee35a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e8a9f8732a8aa73be0cc3b836caca3caa777251e5a90217a31fed6fadfb7cbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"192b71ccd9de5f5b25a301bcf3040f57a35ca4fbcb5c4b9b09541331976ee35a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:14:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:14:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:14:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/192b71ccd9de5f5b25a301bcf3040f57a35ca4fbcb5c4b9b09541331976ee35a"} {"level":"info","ts":"2026-07-15T14:14:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"192b71ccd9de5f5b25a301bcf3040f57a35ca4fbcb5c4b9b09541331976ee35a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"192b71ccd9de5f5b25a301bcf3040f57a35ca4fbcb5c4b9b09541331976ee35a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:14:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:14:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["192b71ccd9de5f5b25a301bcf3040f57a35ca4fbcb5c4b9b09541331976ee35a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:14:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"192b71ccd9de5f5b25a301bcf3040f57a35ca4fbcb5c4b9b09541331976ee35a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"192b71ccd9de5f5b25a301bcf3040f57a35ca4fbcb5c4b9b09541331976ee35a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:14:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:14:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["192b71ccd9de5f5b25a301bcf3040f57a35ca4fbcb5c4b9b09541331976ee35a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:14:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e8a9f8732a8aa73be0cc3b836caca3caa777251e5a90217a31fed6fadfb7cbd"} {"level":"error","ts":"2026-07-15T14:14:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"192b71ccd9de5f5b25a301bcf3040f57a35ca4fbcb5c4b9b09541331976ee35a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"192b71ccd9de5f5b25a301bcf3040f57a35ca4fbcb5c4b9b09541331976ee35a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T14:14:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"192b71ccd9de5f5b25a301bcf3040f57a35ca4fbcb5c4b9b09541331976ee35a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:14:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:14:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:14:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"192b71ccd9de5f5b25a301bcf3040f57a35ca4fbcb5c4b9b09541331976ee35a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:14:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/192b71ccd9de5f5b25a301bcf3040f57a35ca4fbcb5c4b9b09541331976ee35a"} {"level":"debug","ts":"2026-07-15T14:14:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"192b71ccd9de5f5b25a301bcf3040f57a35ca4fbcb5c4b9b09541331976ee35a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"192b71ccd9de5f5b25a301bcf3040f57a35ca4fbcb5c4b9b09541331976ee35a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"192b71ccd9de5f5b25a301bcf3040f57a35ca4fbcb5c4b9b09541331976ee35a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"192b71ccd9de5f5b25a301bcf3040f57a35ca4fbcb5c4b9b09541331976ee35a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:14:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/192b71ccd9de5f5b25a301bcf3040f57a35ca4fbcb5c4b9b09541331976ee35a"} {"level":"debug","ts":"2026-07-15T14:14:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"192b71ccd9de5f5b25a301bcf3040f57a35ca4fbcb5c4b9b09541331976ee35a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:14:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:14:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["192b71ccd9de5f5b25a301bcf3040f57a35ca4fbcb5c4b9b09541331976ee35a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:14:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"192b71ccd9de5f5b25a301bcf3040f57a35ca4fbcb5c4b9b09541331976ee35a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"192b71ccd9de5f5b25a301bcf3040f57a35ca4fbcb5c4b9b09541331976ee35a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:14:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/192b71ccd9de5f5b25a301bcf3040f57a35ca4fbcb5c4b9b09541331976ee35a"} {"level":"debug","ts":"2026-07-15T14:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0aaf4e7eed45f8601be4d983c1e98e5cfa3f940979703f2e1242ab59ee9165e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:14:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:14:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0aaf4e7eed45f8601be4d983c1e98e5cfa3f940979703f2e1242ab59ee9165e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0aaf4e7eed45f8601be4d983c1e98e5cfa3f940979703f2e1242ab59ee9165e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0aaf4e7eed45f8601be4d983c1e98e5cfa3f940979703f2e1242ab59ee9165e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0aaf4e7eed45f8601be4d983c1e98e5cfa3f940979703f2e1242ab59ee9165e"} {"level":"info","ts":"2026-07-15T14:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0aaf4e7eed45f8601be4d983c1e98e5cfa3f940979703f2e1242ab59ee9165e"} {"level":"debug","ts":"2026-07-15T14:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0aaf4e7eed45f8601be4d983c1e98e5cfa3f940979703f2e1242ab59ee9165e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:14:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:14:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0aaf4e7eed45f8601be4d983c1e98e5cfa3f940979703f2e1242ab59ee9165e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0aaf4e7eed45f8601be4d983c1e98e5cfa3f940979703f2e1242ab59ee9165e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0aaf4e7eed45f8601be4d983c1e98e5cfa3f940979703f2e1242ab59ee9165e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0aaf4e7eed45f8601be4d983c1e98e5cfa3f940979703f2e1242ab59ee9165e"} {"level":"debug","ts":"2026-07-15T14:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15889e9fa52af83bc9c03a0ab288dc073230e512a9c05ce8e3de2bb5d4475714","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:14:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:14:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15889e9fa52af83bc9c03a0ab288dc073230e512a9c05ce8e3de2bb5d4475714","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15889e9fa52af83bc9c03a0ab288dc073230e512a9c05ce8e3de2bb5d4475714","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15889e9fa52af83bc9c03a0ab288dc073230e512a9c05ce8e3de2bb5d4475714"} {"level":"debug","ts":"2026-07-15T14:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15889e9fa52af83bc9c03a0ab288dc073230e512a9c05ce8e3de2bb5d4475714","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15889e9fa52af83bc9c03a0ab288dc073230e512a9c05ce8e3de2bb5d4475714"} {"level":"debug","ts":"2026-07-15T14:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15889e9fa52af83bc9c03a0ab288dc073230e512a9c05ce8e3de2bb5d4475714","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:14:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:14:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15889e9fa52af83bc9c03a0ab288dc073230e512a9c05ce8e3de2bb5d4475714"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15889e9fa52af83bc9c03a0ab288dc073230e512a9c05ce8e3de2bb5d4475714","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15889e9fa52af83bc9c03a0ab288dc073230e512a9c05ce8e3de2bb5d4475714","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15889e9fa52af83bc9c03a0ab288dc073230e512a9c05ce8e3de2bb5d4475714"} {"level":"debug","ts":"2026-07-15T14:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2535aaf092aa6a5180be482c651366ddd6d080fcfe691c11d5a94d5412eda107","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:14:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2535aaf092aa6a5180be482c651366ddd6d080fcfe691c11d5a94d5412eda107"} {"level":"debug","ts":"2026-07-15T14:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4183ff93006dc5fef73bbd57d585fac35552cae6b4ca3fc11d5591c5f13cedf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:14:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:14:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4183ff93006dc5fef73bbd57d585fac35552cae6b4ca3fc11d5591c5f13cedf2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4183ff93006dc5fef73bbd57d585fac35552cae6b4ca3fc11d5591c5f13cedf2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4183ff93006dc5fef73bbd57d585fac35552cae6b4ca3fc11d5591c5f13cedf2"} {"level":"debug","ts":"2026-07-15T14:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4183ff93006dc5fef73bbd57d585fac35552cae6b4ca3fc11d5591c5f13cedf2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4183ff93006dc5fef73bbd57d585fac35552cae6b4ca3fc11d5591c5f13cedf2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4183ff93006dc5fef73bbd57d585fac35552cae6b4ca3fc11d5591c5f13cedf2"} {"level":"debug","ts":"2026-07-15T14:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4183ff93006dc5fef73bbd57d585fac35552cae6b4ca3fc11d5591c5f13cedf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:14:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:14:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4183ff93006dc5fef73bbd57d585fac35552cae6b4ca3fc11d5591c5f13cedf2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4183ff93006dc5fef73bbd57d585fac35552cae6b4ca3fc11d5591c5f13cedf2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4183ff93006dc5fef73bbd57d585fac35552cae6b4ca3fc11d5591c5f13cedf2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4183ff93006dc5fef73bbd57d585fac35552cae6b4ca3fc11d5591c5f13cedf2"} {"level":"debug","ts":"2026-07-15T14:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a2477f350180000badbfc39f4bdc5604aa384c1969bdb8add633a035bbd7bca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a2477f350180000badbfc39f4bdc5604aa384c1969bdb8add633a035bbd7bca"} {"level":"debug","ts":"2026-07-15T14:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4973306b384733a61a9112bc9e26aa87b36772d6e8b6618ba867f9564843f4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:14:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:14:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4973306b384733a61a9112bc9e26aa87b36772d6e8b6618ba867f9564843f4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4973306b384733a61a9112bc9e26aa87b36772d6e8b6618ba867f9564843f4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4973306b384733a61a9112bc9e26aa87b36772d6e8b6618ba867f9564843f4d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4973306b384733a61a9112bc9e26aa87b36772d6e8b6618ba867f9564843f4d"} {"level":"debug","ts":"2026-07-15T14:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4973306b384733a61a9112bc9e26aa87b36772d6e8b6618ba867f9564843f4d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4973306b384733a61a9112bc9e26aa87b36772d6e8b6618ba867f9564843f4d"} {"level":"debug","ts":"2026-07-15T14:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4973306b384733a61a9112bc9e26aa87b36772d6e8b6618ba867f9564843f4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:14:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:14:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4973306b384733a61a9112bc9e26aa87b36772d6e8b6618ba867f9564843f4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4973306b384733a61a9112bc9e26aa87b36772d6e8b6618ba867f9564843f4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4973306b384733a61a9112bc9e26aa87b36772d6e8b6618ba867f9564843f4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16157c6d5824de47fcec7555dfa9e39a2617c27f18aee04c681c33bae7cc0cb8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4973306b384733a61a9112bc9e26aa87b36772d6e8b6618ba867f9564843f4d"} {"level":"info","ts":"2026-07-15T14:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16157c6d5824de47fcec7555dfa9e39a2617c27f18aee04c681c33bae7cc0cb8"} {"level":"debug","ts":"2026-07-15T14:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea58aa547ef6b9aaa6b708b0990053957ad167a9bd03fde3a00755e162d31a0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:14:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:14:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea58aa547ef6b9aaa6b708b0990053957ad167a9bd03fde3a00755e162d31a0e"} {"level":"info","ts":"2026-07-15T14:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea58aa547ef6b9aaa6b708b0990053957ad167a9bd03fde3a00755e162d31a0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea58aa547ef6b9aaa6b708b0990053957ad167a9bd03fde3a00755e162d31a0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea58aa547ef6b9aaa6b708b0990053957ad167a9bd03fde3a00755e162d31a0e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea58aa547ef6b9aaa6b708b0990053957ad167a9bd03fde3a00755e162d31a0e"} {"level":"debug","ts":"2026-07-15T14:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea58aa547ef6b9aaa6b708b0990053957ad167a9bd03fde3a00755e162d31a0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:14:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:14:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea58aa547ef6b9aaa6b708b0990053957ad167a9bd03fde3a00755e162d31a0e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea58aa547ef6b9aaa6b708b0990053957ad167a9bd03fde3a00755e162d31a0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea58aa547ef6b9aaa6b708b0990053957ad167a9bd03fde3a00755e162d31a0e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea58aa547ef6b9aaa6b708b0990053957ad167a9bd03fde3a00755e162d31a0e"} {"level":"debug","ts":"2026-07-15T14:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"564dbbd85ebc17cab1cd6844c85327aa55dda8db1f13842e63624f26942c7ce6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/564dbbd85ebc17cab1cd6844c85327aa55dda8db1f13842e63624f26942c7ce6"} {"level":"debug","ts":"2026-07-15T14:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83444e12330a6f1aba7fafa14bca324e0b25016050b9697cf29ef6a43dea82a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:14:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:14:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83444e12330a6f1aba7fafa14bca324e0b25016050b9697cf29ef6a43dea82a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83444e12330a6f1aba7fafa14bca324e0b25016050b9697cf29ef6a43dea82a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27b17c6fbaa2515ff97f3a2cbe3ff5f7ab2c48295e7120c7dd303b25c8bf4f65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83444e12330a6f1aba7fafa14bca324e0b25016050b9697cf29ef6a43dea82a3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83444e12330a6f1aba7fafa14bca324e0b25016050b9697cf29ef6a43dea82a3"} {"level":"debug","ts":"2026-07-15T14:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83444e12330a6f1aba7fafa14bca324e0b25016050b9697cf29ef6a43dea82a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:14:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:14:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83444e12330a6f1aba7fafa14bca324e0b25016050b9697cf29ef6a43dea82a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27b17c6fbaa2515ff97f3a2cbe3ff5f7ab2c48295e7120c7dd303b25c8bf4f65"} {"level":"info","ts":"2026-07-15T14:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83444e12330a6f1aba7fafa14bca324e0b25016050b9697cf29ef6a43dea82a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83444e12330a6f1aba7fafa14bca324e0b25016050b9697cf29ef6a43dea82a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:14:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:14:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83444e12330a6f1aba7fafa14bca324e0b25016050b9697cf29ef6a43dea82a3"} {"level":"info","ts":"2026-07-15T14:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83444e12330a6f1aba7fafa14bca324e0b25016050b9697cf29ef6a43dea82a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83444e12330a6f1aba7fafa14bca324e0b25016050b9697cf29ef6a43dea82a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83444e12330a6f1aba7fafa14bca324e0b25016050b9697cf29ef6a43dea82a3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83444e12330a6f1aba7fafa14bca324e0b25016050b9697cf29ef6a43dea82a3"} {"level":"debug","ts":"2026-07-15T14:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83444e12330a6f1aba7fafa14bca324e0b25016050b9697cf29ef6a43dea82a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e8a9f8732a8aa73be0cc3b836caca3caa777251e5a90217a31fed6fadfb7cbd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83444e12330a6f1aba7fafa14bca324e0b25016050b9697cf29ef6a43dea82a3"} {"level":"debug","ts":"2026-07-15T14:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"192b71ccd9de5f5b25a301bcf3040f57a35ca4fbcb5c4b9b09541331976ee35a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e8a9f8732a8aa73be0cc3b836caca3caa777251e5a90217a31fed6fadfb7cbd"} {"level":"debug","ts":"2026-07-15T14:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db5eaa41f637b71b5a1142e14ae4ac16735500235bb5b3aca472251dd33ef9f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83444e12330a6f1aba7fafa14bca324e0b25016050b9697cf29ef6a43dea82a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:14:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:14:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83444e12330a6f1aba7fafa14bca324e0b25016050b9697cf29ef6a43dea82a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/192b71ccd9de5f5b25a301bcf3040f57a35ca4fbcb5c4b9b09541331976ee35a"} {"level":"info","ts":"2026-07-15T14:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83444e12330a6f1aba7fafa14bca324e0b25016050b9697cf29ef6a43dea82a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83444e12330a6f1aba7fafa14bca324e0b25016050b9697cf29ef6a43dea82a3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db5eaa41f637b71b5a1142e14ae4ac16735500235bb5b3aca472251dd33ef9f8"} {"level":"info","ts":"2026-07-15T14:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83444e12330a6f1aba7fafa14bca324e0b25016050b9697cf29ef6a43dea82a3"} {"level":"debug","ts":"2026-07-15T14:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4b001d2f6b7ec72656d6779fb80c388420599e54613eabdc6603bdc1fa34926","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d79a0b2e92c7534b0f681776b629348644e26f3debbdd1b980b23aeaac02f73c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4b001d2f6b7ec72656d6779fb80c388420599e54613eabdc6603bdc1fa34926"} {"level":"debug","ts":"2026-07-15T14:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7230a5925eeb9c649185280467b0f3175673f8612d3dd0f19366596216bec260","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d79a0b2e92c7534b0f681776b629348644e26f3debbdd1b980b23aeaac02f73c"} {"level":"debug","ts":"2026-07-15T14:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"881db3bce91d01abde883e3c90bdead925a2bfefe1a7234864a5734765aa425a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:14:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7230a5925eeb9c649185280467b0f3175673f8612d3dd0f19366596216bec260"} {"level":"debug","ts":"2026-07-15T14:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f1b06cda9ff3f012a7853d8f2de931bae5a43dd7ddc0874ec1ae0e4dd71f280","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/881db3bce91d01abde883e3c90bdead925a2bfefe1a7234864a5734765aa425a"} {"level":"debug","ts":"2026-07-15T14:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d5c92848bd08c7c701ebbd0c169c5854dfac05e4eda09a98a0567de78ba1e7f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f1b06cda9ff3f012a7853d8f2de931bae5a43dd7ddc0874ec1ae0e4dd71f280"} {"level":"debug","ts":"2026-07-15T14:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bd5034d8d930d2d9ef2ce85e5b849eb587d8592953241f59e482441918cacce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d5c92848bd08c7c701ebbd0c169c5854dfac05e4eda09a98a0567de78ba1e7f"} {"level":"debug","ts":"2026-07-15T14:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40f1a9295642d20a501a932cd99f1f9d60f3ba369dc9d11911f8ba75910aaa3d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bd5034d8d930d2d9ef2ce85e5b849eb587d8592953241f59e482441918cacce"} {"level":"info","ts":"2026-07-15T14:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40f1a9295642d20a501a932cd99f1f9d60f3ba369dc9d11911f8ba75910aaa3d"} {"level":"debug","ts":"2026-07-15T14:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:14:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:14:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92768211b83a3d76065a4e8987c864f3370d98987fbd6f0323406c892fa79ec3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe"} {"level":"info","ts":"2026-07-15T14:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92768211b83a3d76065a4e8987c864f3370d98987fbd6f0323406c892fa79ec3"} {"level":"debug","ts":"2026-07-15T14:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:14:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:14:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:14:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:14:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe"} {"level":"info","ts":"2026-07-15T14:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe"} {"level":"debug","ts":"2026-07-15T14:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe"} {"level":"debug","ts":"2026-07-15T14:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:14:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:14:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe"} {"level":"info","ts":"2026-07-15T14:14:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1dce9b06-6199-49aa-8150-f41848d0f0eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53224","PortSpecifier":{"PortValue":53224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1dce9b06-6199-49aa-8150-f41848d0f0eb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T14:14:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1dce9b06-6199-49aa-8150-f41848d0f0eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53224","PortSpecifier":{"PortValue":53224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784124884,"nanos":917202942},"http":{"id":"1dce9b06-6199-49aa-8150-f41848d0f0eb","method":"POST","headers":{":authority":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:14:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1dce9b06-6199-49aa-8150-f41848d0f0eb","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T14:14:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1dce9b06-6199-49aa-8150-f41848d0f0eb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"34acd1b1-d11c-4700-9be9-1507d93f5695","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6662a338-e456-488d-8970-2d47aeede02a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1aa8eda4e980"]}} {"level":"debug","ts":"2026-07-15T14:14:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1dce9b06-6199-49aa-8150-f41848d0f0eb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1aa8eda4e980"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6662a338-e456-488d-8970-2d47aeede02a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"34acd1b1-d11c-4700-9be9-1507d93f5695","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"27b17c6fbaa2515ff97f3a2cbe3ff5f7ab2c48295e7120c7dd303b25c8bf4f65"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:14:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1dce9b06-6199-49aa-8150-f41848d0f0eb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:14:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1dce9b06-6199-49aa-8150-f41848d0f0eb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:14:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1dce9b06-6199-49aa-8150-f41848d0f0eb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2723e9/sub-test-model-2723e9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2723e9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:14:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1dce9b06-6199-49aa-8150-f41848d0f0eb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T14:14:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1dce9b06-6199-49aa-8150-f41848d0f0eb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T14:14:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1dce9b06-6199-49aa-8150-f41848d0f0eb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-15T14:14:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1dce9b06-6199-49aa-8150-f41848d0f0eb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T14:14:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1dce9b06-6199-49aa-8150-f41848d0f0eb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T14:14:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"70fe3107-cfab-4515-a517-f0c019011b26","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56922","PortSpecifier":{"PortValue":56922}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"70fe3107-cfab-4515-a517-f0c019011b26","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-bfdd40.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T14:14:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"70fe3107-cfab-4515-a517-f0c019011b26","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56922","PortSpecifier":{"PortValue":56922}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784124884,"nanos":962248995},"http":{"id":"70fe3107-cfab-4515-a517-f0c019011b26","method":"POST","headers":{":authority":"e2e-shared-b-bfdd40.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:14:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"70fe3107-cfab-4515-a517-f0c019011b26","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T14:14:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"70fe3107-cfab-4515-a517-f0c019011b26","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"34acd1b1-d11c-4700-9be9-1507d93f5695","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6662a338-e456-488d-8970-2d47aeede02a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1aa8eda4e980"]}} {"level":"debug","ts":"2026-07-15T14:14:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"70fe3107-cfab-4515-a517-f0c019011b26","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1aa8eda4e980"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6662a338-e456-488d-8970-2d47aeede02a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"34acd1b1-d11c-4700-9be9-1507d93f5695","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"16157c6d5824de47fcec7555dfa9e39a2617c27f18aee04c681c33bae7cc0cb8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-bfdd40.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:14:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70fe3107-cfab-4515-a517-f0c019011b26","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:14:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70fe3107-cfab-4515-a517-f0c019011b26","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:14:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70fe3107-cfab-4515-a517-f0c019011b26","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-bfdd40/sub-test-model-bfdd40\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-bfdd40/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:14:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"70fe3107-cfab-4515-a517-f0c019011b26","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T14:14:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70fe3107-cfab-4515-a517-f0c019011b26","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T14:14:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70fe3107-cfab-4515-a517-f0c019011b26","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T14:14:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"70fe3107-cfab-4515-a517-f0c019011b26","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T14:14:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"70fe3107-cfab-4515-a517-f0c019011b26","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T14:14:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"11df7eab-11b6-4f95-8d05-d7c082bf2722","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53230","PortSpecifier":{"PortValue":53230}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"11df7eab-11b6-4f95-8d05-d7c082bf2722","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T14:14:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"11df7eab-11b6-4f95-8d05-d7c082bf2722","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53230","PortSpecifier":{"PortValue":53230}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784124885,"nanos":2729706},"http":{"id":"11df7eab-11b6-4f95-8d05-d7c082bf2722","method":"GET","headers":{":authority":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:14:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"11df7eab-11b6-4f95-8d05-d7c082bf2722","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-c0t94P8fTWzy4r2L_ZVY0yxaul9YNrzM1GpRffxuRRc2KPppSLVaPjC3gRqr"} {"level":"debug","ts":"2026-07-15T14:14:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"11df7eab-11b6-4f95-8d05-d7c082bf2722","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2723e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-c0t94P8fTWzy4r2L_ZVY0yxaul9YNrzM1GpRffxuRRc2KPppSLVaPjC3gRqr\"}"} {"level":"debug","ts":"2026-07-15T14:14:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"11df7eab-11b6-4f95-8d05-d7c082bf2722","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2723e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1471a8b3-e66a-4ebb-b808-b84eea127c9d","keyName":"e2e-sub-iso-d08feb","subscription":"e2e-a-only-d8d76b","tenant":"e2e-shared-a-2723e9","userId":"1471a8b3-e66a-4ebb-b808-b84eea127c9d","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-15T14:14:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"11df7eab-11b6-4f95-8d05-d7c082bf2722","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:14:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"11df7eab-11b6-4f95-8d05-d7c082bf2722","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:14:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"11df7eab-11b6-4f95-8d05-d7c082bf2722","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:14:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"11df7eab-11b6-4f95-8d05-d7c082bf2722","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2723e9/sub-test-model-2723e9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2723e9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:14:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"11df7eab-11b6-4f95-8d05-d7c082bf2722","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-15T14:14:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"11df7eab-11b6-4f95-8d05-d7c082bf2722","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T14:14:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"11df7eab-11b6-4f95-8d05-d7c082bf2722","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T14:14:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"11df7eab-11b6-4f95-8d05-d7c082bf2722","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-d8d76b"} {"level":"info","ts":"2026-07-15T14:14:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"11df7eab-11b6-4f95-8d05-d7c082bf2722","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T14:14:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"11df7eab-11b6-4f95-8d05-d7c082bf2722","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T14:14:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2ba0fa4f-b12f-40f5-bc22-dff283966872","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56938","PortSpecifier":{"PortValue":56938}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2ba0fa4f-b12f-40f5-bc22-dff283966872","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-bfdd40.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T14:14:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2ba0fa4f-b12f-40f5-bc22-dff283966872","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:56938","PortSpecifier":{"PortValue":56938}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784124885,"nanos":45763714},"http":{"id":"2ba0fa4f-b12f-40f5-bc22-dff283966872","method":"GET","headers":{":authority":"e2e-shared-b-bfdd40.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:14:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2ba0fa4f-b12f-40f5-bc22-dff283966872","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-lRWbZOhJACIFV4Hx_SSMzdCwZQyao4SetMmGBeNoP8OYImUueLw25NFyKTqB"} {"level":"debug","ts":"2026-07-15T14:14:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2ba0fa4f-b12f-40f5-bc22-dff283966872","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-bfdd40.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-lRWbZOhJACIFV4Hx_SSMzdCwZQyao4SetMmGBeNoP8OYImUueLw25NFyKTqB\"}"} {"level":"debug","ts":"2026-07-15T14:14:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2ba0fa4f-b12f-40f5-bc22-dff283966872","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-bfdd40.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1b01d468-8a92-4fba-afee-b151a61e36a3","keyName":"e2e-sub-iso-de339f","subscription":"e2e-b-only-d8d76b","tenant":"e2e-shared-b-bfdd40","userId":"1b01d468-8a92-4fba-afee-b151a61e36a3","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-15T14:14:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2ba0fa4f-b12f-40f5-bc22-dff283966872","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:14:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ba0fa4f-b12f-40f5-bc22-dff283966872","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:14:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ba0fa4f-b12f-40f5-bc22-dff283966872","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:14:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ba0fa4f-b12f-40f5-bc22-dff283966872","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-bfdd40/sub-test-model-bfdd40\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-bfdd40/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:14:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ba0fa4f-b12f-40f5-bc22-dff283966872","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T14:14:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2ba0fa4f-b12f-40f5-bc22-dff283966872","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-15T14:14:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ba0fa4f-b12f-40f5-bc22-dff283966872","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-d8d76b"} {"level":"debug","ts":"2026-07-15T14:14:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ba0fa4f-b12f-40f5-bc22-dff283966872","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T14:14:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2ba0fa4f-b12f-40f5-bc22-dff283966872","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T14:14:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2ba0fa4f-b12f-40f5-bc22-dff283966872","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T14:15:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"de768e79-5b0f-47a0-89c6-d9aa0a237c3e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57010","PortSpecifier":{"PortValue":57010}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"de768e79-5b0f-47a0-89c6-d9aa0a237c3e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T14:15:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"de768e79-5b0f-47a0-89c6-d9aa0a237c3e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57010","PortSpecifier":{"PortValue":57010}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784124903,"nanos":734551724},"http":{"id":"de768e79-5b0f-47a0-89c6-d9aa0a237c3e","method":"POST","headers":{":authority":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:15:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"de768e79-5b0f-47a0-89c6-d9aa0a237c3e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T14:15:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"de768e79-5b0f-47a0-89c6-d9aa0a237c3e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"34acd1b1-d11c-4700-9be9-1507d93f5695","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6662a338-e456-488d-8970-2d47aeede02a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1aa8eda4e980"]}} {"level":"debug","ts":"2026-07-15T14:15:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"de768e79-5b0f-47a0-89c6-d9aa0a237c3e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1aa8eda4e980"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6662a338-e456-488d-8970-2d47aeede02a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"34acd1b1-d11c-4700-9be9-1507d93f5695","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"27b17c6fbaa2515ff97f3a2cbe3ff5f7ab2c48295e7120c7dd303b25c8bf4f65"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:15:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de768e79-5b0f-47a0-89c6-d9aa0a237c3e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:15:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de768e79-5b0f-47a0-89c6-d9aa0a237c3e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:15:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de768e79-5b0f-47a0-89c6-d9aa0a237c3e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2723e9/sub-test-model-2723e9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2723e9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:15:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"de768e79-5b0f-47a0-89c6-d9aa0a237c3e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T14:15:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"de768e79-5b0f-47a0-89c6-d9aa0a237c3e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T14:15:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"de768e79-5b0f-47a0-89c6-d9aa0a237c3e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-15T14:15:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"de768e79-5b0f-47a0-89c6-d9aa0a237c3e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T14:15:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"de768e79-5b0f-47a0-89c6-d9aa0a237c3e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T14:15:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"04f52f33-1972-4809-b3de-9afcbe17e47e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:46576","PortSpecifier":{"PortValue":46576}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"04f52f33-1972-4809-b3de-9afcbe17e47e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-bfdd40.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T14:15:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"04f52f33-1972-4809-b3de-9afcbe17e47e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:46576","PortSpecifier":{"PortValue":46576}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784124903,"nanos":777123119},"http":{"id":"04f52f33-1972-4809-b3de-9afcbe17e47e","method":"POST","headers":{":authority":"e2e-shared-b-bfdd40.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:15:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"04f52f33-1972-4809-b3de-9afcbe17e47e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T14:15:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"04f52f33-1972-4809-b3de-9afcbe17e47e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"34acd1b1-d11c-4700-9be9-1507d93f5695","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6662a338-e456-488d-8970-2d47aeede02a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1aa8eda4e980"]}} {"level":"debug","ts":"2026-07-15T14:15:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"04f52f33-1972-4809-b3de-9afcbe17e47e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1aa8eda4e980"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6662a338-e456-488d-8970-2d47aeede02a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"34acd1b1-d11c-4700-9be9-1507d93f5695","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"16157c6d5824de47fcec7555dfa9e39a2617c27f18aee04c681c33bae7cc0cb8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-bfdd40.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:15:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04f52f33-1972-4809-b3de-9afcbe17e47e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:15:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04f52f33-1972-4809-b3de-9afcbe17e47e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:15:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04f52f33-1972-4809-b3de-9afcbe17e47e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-bfdd40/sub-test-model-bfdd40\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-bfdd40/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:15:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"04f52f33-1972-4809-b3de-9afcbe17e47e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T14:15:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04f52f33-1972-4809-b3de-9afcbe17e47e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T14:15:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04f52f33-1972-4809-b3de-9afcbe17e47e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-15T14:15:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"04f52f33-1972-4809-b3de-9afcbe17e47e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T14:15:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"04f52f33-1972-4809-b3de-9afcbe17e47e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T14:15:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6ae36055-5132-4a4f-83ef-dfe9959ad32c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57014","PortSpecifier":{"PortValue":57014}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6ae36055-5132-4a4f-83ef-dfe9959ad32c","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T14:15:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6ae36055-5132-4a4f-83ef-dfe9959ad32c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57014","PortSpecifier":{"PortValue":57014}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784124903,"nanos":812808755},"http":{"id":"6ae36055-5132-4a4f-83ef-dfe9959ad32c","method":"POST","headers":{":authority":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:15:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6ae36055-5132-4a4f-83ef-dfe9959ad32c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-57iZHsfgEyzI5HKp_pAdHzxQcwLhmHiayfW4qFItmMHzYIL0UnnpLisaKCvo"} {"level":"debug","ts":"2026-07-15T14:15:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6ae36055-5132-4a4f-83ef-dfe9959ad32c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2723e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-57iZHsfgEyzI5HKp_pAdHzxQcwLhmHiayfW4qFItmMHzYIL0UnnpLisaKCvo\"}"} {"level":"debug","ts":"2026-07-15T14:15:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6ae36055-5132-4a4f-83ef-dfe9959ad32c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2723e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b64fff5a-de9a-45a6-a637-7907d2cf03f0","keyName":"e2e-sub-iso-f63441","subscription":"e2e-shared-sub-8cbc55","tenant":"e2e-shared-a-2723e9","userId":"b64fff5a-de9a-45a6-a637-7907d2cf03f0","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-15T14:15:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6ae36055-5132-4a4f-83ef-dfe9959ad32c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:15:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ae36055-5132-4a4f-83ef-dfe9959ad32c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:15:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ae36055-5132-4a4f-83ef-dfe9959ad32c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:15:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ae36055-5132-4a4f-83ef-dfe9959ad32c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2723e9/sub-test-model-2723e9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2723e9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:15:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ae36055-5132-4a4f-83ef-dfe9959ad32c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T14:15:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6ae36055-5132-4a4f-83ef-dfe9959ad32c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-15T14:15:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ae36055-5132-4a4f-83ef-dfe9959ad32c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-8cbc55"} {"level":"debug","ts":"2026-07-15T14:15:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ae36055-5132-4a4f-83ef-dfe9959ad32c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T14:15:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6ae36055-5132-4a4f-83ef-dfe9959ad32c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T14:15:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6ae36055-5132-4a4f-83ef-dfe9959ad32c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T14:15:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fc232de4-89c2-4aad-b541-298883e56f01","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:46580","PortSpecifier":{"PortValue":46580}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fc232de4-89c2-4aad-b541-298883e56f01","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-bfdd40.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T14:15:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fc232de4-89c2-4aad-b541-298883e56f01","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:46580","PortSpecifier":{"PortValue":46580}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784124903,"nanos":845978296},"http":{"id":"fc232de4-89c2-4aad-b541-298883e56f01","method":"POST","headers":{":authority":"e2e-shared-b-bfdd40.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:15:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fc232de4-89c2-4aad-b541-298883e56f01","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-16kKxJCM4oyzWfYne_hfrdORbqJpRE6K0GfFP8MM6lnpUz8B4IXW2X3FakwG9"} {"level":"debug","ts":"2026-07-15T14:15:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fc232de4-89c2-4aad-b541-298883e56f01","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-bfdd40.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-16kKxJCM4oyzWfYne_hfrdORbqJpRE6K0GfFP8MM6lnpUz8B4IXW2X3FakwG9\"}"} {"level":"debug","ts":"2026-07-15T14:15:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fc232de4-89c2-4aad-b541-298883e56f01","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-bfdd40.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"65701b35-97cb-424a-878e-1d01e257c947","keyName":"e2e-sub-iso-86172c","subscription":"e2e-shared-sub-8cbc55","tenant":"e2e-shared-b-bfdd40","userId":"65701b35-97cb-424a-878e-1d01e257c947","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-15T14:15:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fc232de4-89c2-4aad-b541-298883e56f01","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:15:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc232de4-89c2-4aad-b541-298883e56f01","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:15:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc232de4-89c2-4aad-b541-298883e56f01","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:15:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc232de4-89c2-4aad-b541-298883e56f01","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-bfdd40/sub-test-model-bfdd40\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-bfdd40/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:15:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fc232de4-89c2-4aad-b541-298883e56f01","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-15T14:15:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc232de4-89c2-4aad-b541-298883e56f01","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T14:15:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc232de4-89c2-4aad-b541-298883e56f01","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-8cbc55"} {"level":"debug","ts":"2026-07-15T14:15:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc232de4-89c2-4aad-b541-298883e56f01","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T14:15:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fc232de4-89c2-4aad-b541-298883e56f01","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T14:15:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fc232de4-89c2-4aad-b541-298883e56f01","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T14:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/881db3bce91d01abde883e3c90bdead925a2bfefe1a7234864a5734765aa425a"} {"level":"info","ts":"2026-07-15T14:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c0aaf4e7eed45f8601be4d983c1e98e5cfa3f940979703f2e1242ab59ee9165e"} {"level":"info","ts":"2026-07-15T14:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/db5eaa41f637b71b5a1142e14ae4ac16735500235bb5b3aca472251dd33ef9f8"} {"level":"info","ts":"2026-07-15T14:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d79a0b2e92c7534b0f681776b629348644e26f3debbdd1b980b23aeaac02f73c"} {"level":"info","ts":"2026-07-15T14:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/40f1a9295642d20a501a932cd99f1f9d60f3ba369dc9d11911f8ba75910aaa3d"} {"level":"info","ts":"2026-07-15T14:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a2477f350180000badbfc39f4bdc5604aa384c1969bdb8add633a035bbd7bca"} {"level":"info","ts":"2026-07-15T14:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/564dbbd85ebc17cab1cd6844c85327aa55dda8db1f13842e63624f26942c7ce6"} {"level":"info","ts":"2026-07-15T14:15:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1d5c92848bd08c7c701ebbd0c169c5854dfac05e4eda09a98a0567de78ba1e7f"} {"level":"debug","ts":"2026-07-15T14:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54c4e4e9699a87e9ef835d46b3b36fd50fd3e35342be318b87c5b1dc8ff50e7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:15:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:15:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54c4e4e9699a87e9ef835d46b3b36fd50fd3e35342be318b87c5b1dc8ff50e7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54c4e4e9699a87e9ef835d46b3b36fd50fd3e35342be318b87c5b1dc8ff50e7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54c4e4e9699a87e9ef835d46b3b36fd50fd3e35342be318b87c5b1dc8ff50e7c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54c4e4e9699a87e9ef835d46b3b36fd50fd3e35342be318b87c5b1dc8ff50e7c"} {"level":"debug","ts":"2026-07-15T14:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54c4e4e9699a87e9ef835d46b3b36fd50fd3e35342be318b87c5b1dc8ff50e7c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54c4e4e9699a87e9ef835d46b3b36fd50fd3e35342be318b87c5b1dc8ff50e7c"} {"level":"debug","ts":"2026-07-15T14:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54c4e4e9699a87e9ef835d46b3b36fd50fd3e35342be318b87c5b1dc8ff50e7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:15:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:15:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54c4e4e9699a87e9ef835d46b3b36fd50fd3e35342be318b87c5b1dc8ff50e7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54c4e4e9699a87e9ef835d46b3b36fd50fd3e35342be318b87c5b1dc8ff50e7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54c4e4e9699a87e9ef835d46b3b36fd50fd3e35342be318b87c5b1dc8ff50e7c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54c4e4e9699a87e9ef835d46b3b36fd50fd3e35342be318b87c5b1dc8ff50e7c"} {"level":"debug","ts":"2026-07-15T14:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06b8811ef5f6053af0dc45b62b5734093cf5c13e941c8ae9536cdf49286ea009","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:15:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:15:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06b8811ef5f6053af0dc45b62b5734093cf5c13e941c8ae9536cdf49286ea009","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd6565f39e2a640ab9cf3f30411e59d15d46ff620350f431aa286f7783860b14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:15:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:15:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06b8811ef5f6053af0dc45b62b5734093cf5c13e941c8ae9536cdf49286ea009"} {"level":"info","ts":"2026-07-15T14:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd6565f39e2a640ab9cf3f30411e59d15d46ff620350f431aa286f7783860b14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06b8811ef5f6053af0dc45b62b5734093cf5c13e941c8ae9536cdf49286ea009","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:15:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:15:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["06b8811ef5f6053af0dc45b62b5734093cf5c13e941c8ae9536cdf49286ea009"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd6565f39e2a640ab9cf3f30411e59d15d46ff620350f431aa286f7783860b14"} {"level":"info","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06b8811ef5f6053af0dc45b62b5734093cf5c13e941c8ae9536cdf49286ea009","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd6565f39e2a640ab9cf3f30411e59d15d46ff620350f431aa286f7783860b14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:15:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:15:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd6565f39e2a640ab9cf3f30411e59d15d46ff620350f431aa286f7783860b14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06b8811ef5f6053af0dc45b62b5734093cf5c13e941c8ae9536cdf49286ea009"} {"level":"info","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd6565f39e2a640ab9cf3f30411e59d15d46ff620350f431aa286f7783860b14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06b8811ef5f6053af0dc45b62b5734093cf5c13e941c8ae9536cdf49286ea009","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f46a4fcb9a5ed8d773595e3237f2963753da010dae35cc71c5f80b30b664c54e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:15:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:15:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd6565f39e2a640ab9cf3f30411e59d15d46ff620350f431aa286f7783860b14"} {"level":"info","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f46a4fcb9a5ed8d773595e3237f2963753da010dae35cc71c5f80b30b664c54e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd6565f39e2a640ab9cf3f30411e59d15d46ff620350f431aa286f7783860b14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f46a4fcb9a5ed8d773595e3237f2963753da010dae35cc71c5f80b30b664c54e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f46a4fcb9a5ed8d773595e3237f2963753da010dae35cc71c5f80b30b664c54e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06b8811ef5f6053af0dc45b62b5734093cf5c13e941c8ae9536cdf49286ea009"} {"level":"debug","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f46a4fcb9a5ed8d773595e3237f2963753da010dae35cc71c5f80b30b664c54e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:15:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:15:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f46a4fcb9a5ed8d773595e3237f2963753da010dae35cc71c5f80b30b664c54e"} {"level":"info","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f46a4fcb9a5ed8d773595e3237f2963753da010dae35cc71c5f80b30b664c54e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f46a4fcb9a5ed8d773595e3237f2963753da010dae35cc71c5f80b30b664c54e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:15:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:15:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f46a4fcb9a5ed8d773595e3237f2963753da010dae35cc71c5f80b30b664c54e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd6565f39e2a640ab9cf3f30411e59d15d46ff620350f431aa286f7783860b14"} {"level":"info","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f46a4fcb9a5ed8d773595e3237f2963753da010dae35cc71c5f80b30b664c54e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95501a656d1aee514bb342890d56077a3f5d50eae70581b6e2ffa1293b5d71e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:15:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:15:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f46a4fcb9a5ed8d773595e3237f2963753da010dae35cc71c5f80b30b664c54e"} {"level":"info","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95501a656d1aee514bb342890d56077a3f5d50eae70581b6e2ffa1293b5d71e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f46a4fcb9a5ed8d773595e3237f2963753da010dae35cc71c5f80b30b664c54e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95501a656d1aee514bb342890d56077a3f5d50eae70581b6e2ffa1293b5d71e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:15:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:15:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95501a656d1aee514bb342890d56077a3f5d50eae70581b6e2ffa1293b5d71e0"} {"level":"info","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95501a656d1aee514bb342890d56077a3f5d50eae70581b6e2ffa1293b5d71e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95501a656d1aee514bb342890d56077a3f5d50eae70581b6e2ffa1293b5d71e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:15:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:15:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95501a656d1aee514bb342890d56077a3f5d50eae70581b6e2ffa1293b5d71e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"95501a656d1aee514bb342890d56077a3f5d50eae70581b6e2ffa1293b5d71e0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"95501a656d1aee514bb342890d56077a3f5d50eae70581b6e2ffa1293b5d71e0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95501a656d1aee514bb342890d56077a3f5d50eae70581b6e2ffa1293b5d71e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:15:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:15:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95501a656d1aee514bb342890d56077a3f5d50eae70581b6e2ffa1293b5d71e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f46a4fcb9a5ed8d773595e3237f2963753da010dae35cc71c5f80b30b664c54e"} {"level":"info","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95501a656d1aee514bb342890d56077a3f5d50eae70581b6e2ffa1293b5d71e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95501a656d1aee514bb342890d56077a3f5d50eae70581b6e2ffa1293b5d71e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95501a656d1aee514bb342890d56077a3f5d50eae70581b6e2ffa1293b5d71e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:15:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:15:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95501a656d1aee514bb342890d56077a3f5d50eae70581b6e2ffa1293b5d71e0"} {"level":"info","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95501a656d1aee514bb342890d56077a3f5d50eae70581b6e2ffa1293b5d71e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95501a656d1aee514bb342890d56077a3f5d50eae70581b6e2ffa1293b5d71e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:15:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:15:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95501a656d1aee514bb342890d56077a3f5d50eae70581b6e2ffa1293b5d71e0"} {"level":"error","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"95501a656d1aee514bb342890d56077a3f5d50eae70581b6e2ffa1293b5d71e0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"95501a656d1aee514bb342890d56077a3f5d50eae70581b6e2ffa1293b5d71e0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95501a656d1aee514bb342890d56077a3f5d50eae70581b6e2ffa1293b5d71e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95501a656d1aee514bb342890d56077a3f5d50eae70581b6e2ffa1293b5d71e0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95501a656d1aee514bb342890d56077a3f5d50eae70581b6e2ffa1293b5d71e0"} {"level":"debug","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95501a656d1aee514bb342890d56077a3f5d50eae70581b6e2ffa1293b5d71e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:15:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:15:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95501a656d1aee514bb342890d56077a3f5d50eae70581b6e2ffa1293b5d71e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95501a656d1aee514bb342890d56077a3f5d50eae70581b6e2ffa1293b5d71e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95501a656d1aee514bb342890d56077a3f5d50eae70581b6e2ffa1293b5d71e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:15:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:15:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95501a656d1aee514bb342890d56077a3f5d50eae70581b6e2ffa1293b5d71e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95501a656d1aee514bb342890d56077a3f5d50eae70581b6e2ffa1293b5d71e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:15:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:15:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95501a656d1aee514bb342890d56077a3f5d50eae70581b6e2ffa1293b5d71e0"} {"level":"info","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95501a656d1aee514bb342890d56077a3f5d50eae70581b6e2ffa1293b5d71e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:15:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:15:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95501a656d1aee514bb342890d56077a3f5d50eae70581b6e2ffa1293b5d71e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4"} {"level":"info","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95501a656d1aee514bb342890d56077a3f5d50eae70581b6e2ffa1293b5d71e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:15:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:15:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95501a656d1aee514bb342890d56077a3f5d50eae70581b6e2ffa1293b5d71e0"} {"level":"info","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95501a656d1aee514bb342890d56077a3f5d50eae70581b6e2ffa1293b5d71e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:15:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:15:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4"} {"level":"info","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:15:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:15:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:15:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:15:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95501a656d1aee514bb342890d56077a3f5d50eae70581b6e2ffa1293b5d71e0"} {"level":"error","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:15:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:15:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4"} {"level":"info","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28aa865198b5033eb2156a1797fbfb1e76bcc540d61ba4c44b9901dde7c84b62","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:15:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:15:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28aa865198b5033eb2156a1797fbfb1e76bcc540d61ba4c44b9901dde7c84b62"} {"level":"info","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28aa865198b5033eb2156a1797fbfb1e76bcc540d61ba4c44b9901dde7c84b62","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:15:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:15:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:15:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:15:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88"} {"level":"info","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28aa865198b5033eb2156a1797fbfb1e76bcc540d61ba4c44b9901dde7c84b62","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:15:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:15:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28aa865198b5033eb2156a1797fbfb1e76bcc540d61ba4c44b9901dde7c84b62"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4"} {"level":"info","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28aa865198b5033eb2156a1797fbfb1e76bcc540d61ba4c44b9901dde7c84b62","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:15:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:15:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28aa865198b5033eb2156a1797fbfb1e76bcc540d61ba4c44b9901dde7c84b62","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:15:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:15:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28aa865198b5033eb2156a1797fbfb1e76bcc540d61ba4c44b9901dde7c84b62"} {"level":"info","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28aa865198b5033eb2156a1797fbfb1e76bcc540d61ba4c44b9901dde7c84b62","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:15:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:15:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88"} {"level":"info","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28aa865198b5033eb2156a1797fbfb1e76bcc540d61ba4c44b9901dde7c84b62","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:15:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:15:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28aa865198b5033eb2156a1797fbfb1e76bcc540d61ba4c44b9901dde7c84b62"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28aa865198b5033eb2156a1797fbfb1e76bcc540d61ba4c44b9901dde7c84b62","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:15:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:15:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4"} {"level":"info","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28aa865198b5033eb2156a1797fbfb1e76bcc540d61ba4c44b9901dde7c84b62","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:15:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:15:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28aa865198b5033eb2156a1797fbfb1e76bcc540d61ba4c44b9901dde7c84b62"} {"level":"info","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28aa865198b5033eb2156a1797fbfb1e76bcc540d61ba4c44b9901dde7c84b62","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:15:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:15:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28aa865198b5033eb2156a1797fbfb1e76bcc540d61ba4c44b9901dde7c84b62","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:15:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:15:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28aa865198b5033eb2156a1797fbfb1e76bcc540d61ba4c44b9901dde7c84b62"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88"} {"level":"info","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28aa865198b5033eb2156a1797fbfb1e76bcc540d61ba4c44b9901dde7c84b62","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:15:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:15:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28aa865198b5033eb2156a1797fbfb1e76bcc540d61ba4c44b9901dde7c84b62"} {"level":"info","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28aa865198b5033eb2156a1797fbfb1e76bcc540d61ba4c44b9901dde7c84b62","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:15:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:15:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88"} {"level":"info","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/192b71ccd9de5f5b25a301bcf3040f57a35ca4fbcb5c4b9b09541331976ee35a"} {"level":"info","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:15:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:15:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28aa865198b5033eb2156a1797fbfb1e76bcc540d61ba4c44b9901dde7c84b62"} {"level":"info","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:15:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:15:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:15:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:15:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88"} {"level":"error","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88"} {"level":"info","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7230a5925eeb9c649185280467b0f3175673f8612d3dd0f19366596216bec260"} {"level":"debug","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:15:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:15:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88"} {"level":"info","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0e8a9f8732a8aa73be0cc3b836caca3caa777251e5a90217a31fed6fadfb7cbd"} {"level":"info","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7bd5034d8d930d2d9ef2ce85e5b849eb587d8592953241f59e482441918cacce"} {"level":"info","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9f1b06cda9ff3f012a7853d8f2de931bae5a43dd7ddc0874ec1ae0e4dd71f280"} {"level":"info","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4183ff93006dc5fef73bbd57d585fac35552cae6b4ca3fc11d5591c5f13cedf2"} {"level":"info","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/92768211b83a3d76065a4e8987c864f3370d98987fbd6f0323406c892fa79ec3"} {"level":"info","ts":"2026-07-15T14:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/83444e12330a6f1aba7fafa14bca324e0b25016050b9697cf29ef6a43dea82a3"} {"level":"debug","ts":"2026-07-15T14:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7270cc37a983e412d6b303c56db94b34fa7b6daa290547a549634ffff3e81959","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7270cc37a983e412d6b303c56db94b34fa7b6daa290547a549634ffff3e81959"} {"level":"info","ts":"2026-07-15T14:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7270cc37a983e412d6b303c56db94b34fa7b6daa290547a549634ffff3e81959","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7270cc37a983e412d6b303c56db94b34fa7b6daa290547a549634ffff3e81959","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7270cc37a983e412d6b303c56db94b34fa7b6daa290547a549634ffff3e81959"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7270cc37a983e412d6b303c56db94b34fa7b6daa290547a549634ffff3e81959"} {"level":"info","ts":"2026-07-15T14:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7270cc37a983e412d6b303c56db94b34fa7b6daa290547a549634ffff3e81959","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7270cc37a983e412d6b303c56db94b34fa7b6daa290547a549634ffff3e81959","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7270cc37a983e412d6b303c56db94b34fa7b6daa290547a549634ffff3e81959"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-15T14:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7270cc37a983e412d6b303c56db94b34fa7b6daa290547a549634ffff3e81959","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7270cc37a983e412d6b303c56db94b34fa7b6daa290547a549634ffff3e81959\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T14:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7270cc37a983e412d6b303c56db94b34fa7b6daa290547a549634ffff3e81959","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7270cc37a983e412d6b303c56db94b34fa7b6daa290547a549634ffff3e81959"} {"level":"info","ts":"2026-07-15T14:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7270cc37a983e412d6b303c56db94b34fa7b6daa290547a549634ffff3e81959","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7270cc37a983e412d6b303c56db94b34fa7b6daa290547a549634ffff3e81959","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7270cc37a983e412d6b303c56db94b34fa7b6daa290547a549634ffff3e81959","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7270cc37a983e412d6b303c56db94b34fa7b6daa290547a549634ffff3e81959","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7270cc37a983e412d6b303c56db94b34fa7b6daa290547a549634ffff3e81959","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7270cc37a983e412d6b303c56db94b34fa7b6daa290547a549634ffff3e81959"} {"level":"debug","ts":"2026-07-15T14:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7270cc37a983e412d6b303c56db94b34fa7b6daa290547a549634ffff3e81959","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7270cc37a983e412d6b303c56db94b34fa7b6daa290547a549634ffff3e81959"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7270cc37a983e412d6b303c56db94b34fa7b6daa290547a549634ffff3e81959","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7270cc37a983e412d6b303c56db94b34fa7b6daa290547a549634ffff3e81959","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7270cc37a983e412d6b303c56db94b34fa7b6daa290547a549634ffff3e81959","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7270cc37a983e412d6b303c56db94b34fa7b6daa290547a549634ffff3e81959","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7270cc37a983e412d6b303c56db94b34fa7b6daa290547a549634ffff3e81959"} {"level":"debug","ts":"2026-07-15T14:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7270cc37a983e412d6b303c56db94b34fa7b6daa290547a549634ffff3e81959","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7270cc37a983e412d6b303c56db94b34fa7b6daa290547a549634ffff3e81959","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7270cc37a983e412d6b303c56db94b34fa7b6daa290547a549634ffff3e81959"} {"level":"debug","ts":"2026-07-15T14:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37ff2eb7d1808abf0dd31168586383fb10b39d67a308fb992f2e3652d68a6878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37ff2eb7d1808abf0dd31168586383fb10b39d67a308fb992f2e3652d68a6878","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7270cc37a983e412d6b303c56db94b34fa7b6daa290547a549634ffff3e81959","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7270cc37a983e412d6b303c56db94b34fa7b6daa290547a549634ffff3e81959"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37ff2eb7d1808abf0dd31168586383fb10b39d67a308fb992f2e3652d68a6878"} {"level":"info","ts":"2026-07-15T14:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7270cc37a983e412d6b303c56db94b34fa7b6daa290547a549634ffff3e81959","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37ff2eb7d1808abf0dd31168586383fb10b39d67a308fb992f2e3652d68a6878","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7270cc37a983e412d6b303c56db94b34fa7b6daa290547a549634ffff3e81959","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37ff2eb7d1808abf0dd31168586383fb10b39d67a308fb992f2e3652d68a6878"} {"level":"debug","ts":"2026-07-15T14:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37ff2eb7d1808abf0dd31168586383fb10b39d67a308fb992f2e3652d68a6878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37ff2eb7d1808abf0dd31168586383fb10b39d67a308fb992f2e3652d68a6878"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37ff2eb7d1808abf0dd31168586383fb10b39d67a308fb992f2e3652d68a6878","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37ff2eb7d1808abf0dd31168586383fb10b39d67a308fb992f2e3652d68a6878","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:16:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7270cc37a983e412d6b303c56db94b34fa7b6daa290547a549634ffff3e81959"} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37ff2eb7d1808abf0dd31168586383fb10b39d67a308fb992f2e3652d68a6878"} {"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee"} {"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee"} {"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91c45c7c1b952cbf304c2476c5a472a8ee739cc6175626c6216a1284250210bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91c45c7c1b952cbf304c2476c5a472a8ee739cc6175626c6216a1284250210bd"} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91c45c7c1b952cbf304c2476c5a472a8ee739cc6175626c6216a1284250210bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91c45c7c1b952cbf304c2476c5a472a8ee739cc6175626c6216a1284250210bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91c45c7c1b952cbf304c2476c5a472a8ee739cc6175626c6216a1284250210bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee"} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91c45c7c1b952cbf304c2476c5a472a8ee739cc6175626c6216a1284250210bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91c45c7c1b952cbf304c2476c5a472a8ee739cc6175626c6216a1284250210bd"} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91c45c7c1b952cbf304c2476c5a472a8ee739cc6175626c6216a1284250210bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee"} {"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91c45c7c1b952cbf304c2476c5a472a8ee739cc6175626c6216a1284250210bd"} {"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee"} {"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee"} {"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee"} {"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb504ade6ea538c835385419dd575f5fef736947228dc911ca30f2183adff60b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee"} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb504ade6ea538c835385419dd575f5fef736947228dc911ca30f2183adff60b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb504ade6ea538c835385419dd575f5fef736947228dc911ca30f2183adff60b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb504ade6ea538c835385419dd575f5fef736947228dc911ca30f2183adff60b"} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb504ade6ea538c835385419dd575f5fef736947228dc911ca30f2183adff60b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb504ade6ea538c835385419dd575f5fef736947228dc911ca30f2183adff60b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb504ade6ea538c835385419dd575f5fef736947228dc911ca30f2183adff60b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee"} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb504ade6ea538c835385419dd575f5fef736947228dc911ca30f2183adff60b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb504ade6ea538c835385419dd575f5fef736947228dc911ca30f2183adff60b"} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb504ade6ea538c835385419dd575f5fef736947228dc911ca30f2183adff60b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f230fc3442a176708db750afd04a52e5dba760f5776040f0e8b60ca86a57df9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee"} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f230fc3442a176708db750afd04a52e5dba760f5776040f0e8b60ca86a57df9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb504ade6ea538c835385419dd575f5fef736947228dc911ca30f2183adff60b"} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f230fc3442a176708db750afd04a52e5dba760f5776040f0e8b60ca86a57df9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f230fc3442a176708db750afd04a52e5dba760f5776040f0e8b60ca86a57df9"} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f230fc3442a176708db750afd04a52e5dba760f5776040f0e8b60ca86a57df9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f230fc3442a176708db750afd04a52e5dba760f5776040f0e8b60ca86a57df9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f230fc3442a176708db750afd04a52e5dba760f5776040f0e8b60ca86a57df9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee"} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f230fc3442a176708db750afd04a52e5dba760f5776040f0e8b60ca86a57df9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f230fc3442a176708db750afd04a52e5dba760f5776040f0e8b60ca86a57df9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f230fc3442a176708db750afd04a52e5dba760f5776040f0e8b60ca86a57df9"} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f230fc3442a176708db750afd04a52e5dba760f5776040f0e8b60ca86a57df9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee"} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f230fc3442a176708db750afd04a52e5dba760f5776040f0e8b60ca86a57df9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f230fc3442a176708db750afd04a52e5dba760f5776040f0e8b60ca86a57df9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f230fc3442a176708db750afd04a52e5dba760f5776040f0e8b60ca86a57df9"} {"level":"error","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee"} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f230fc3442a176708db750afd04a52e5dba760f5776040f0e8b60ca86a57df9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f230fc3442a176708db750afd04a52e5dba760f5776040f0e8b60ca86a57df9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f230fc3442a176708db750afd04a52e5dba760f5776040f0e8b60ca86a57df9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f230fc3442a176708db750afd04a52e5dba760f5776040f0e8b60ca86a57df9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee"} {"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f230fc3442a176708db750afd04a52e5dba760f5776040f0e8b60ca86a57df9"} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee"} {"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee"} {"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee"} {"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee"} {"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"610a4bd3a1df453036132868f64bba613843bca8521c205fa99a9044b0f05207","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"610a4bd3a1df453036132868f64bba613843bca8521c205fa99a9044b0f05207","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"610a4bd3a1df453036132868f64bba613843bca8521c205fa99a9044b0f05207","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"610a4bd3a1df453036132868f64bba613843bca8521c205fa99a9044b0f05207","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/610a4bd3a1df453036132868f64bba613843bca8521c205fa99a9044b0f05207"} {"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/610a4bd3a1df453036132868f64bba613843bca8521c205fa99a9044b0f05207"} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"610a4bd3a1df453036132868f64bba613843bca8521c205fa99a9044b0f05207","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["610a4bd3a1df453036132868f64bba613843bca8521c205fa99a9044b0f05207"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"610a4bd3a1df453036132868f64bba613843bca8521c205fa99a9044b0f05207","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee"} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"610a4bd3a1df453036132868f64bba613843bca8521c205fa99a9044b0f05207","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/610a4bd3a1df453036132868f64bba613843bca8521c205fa99a9044b0f05207"} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"610a4bd3a1df453036132868f64bba613843bca8521c205fa99a9044b0f05207","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"610a4bd3a1df453036132868f64bba613843bca8521c205fa99a9044b0f05207","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["610a4bd3a1df453036132868f64bba613843bca8521c205fa99a9044b0f05207"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"610a4bd3a1df453036132868f64bba613843bca8521c205fa99a9044b0f05207","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5fea50a9f57d2e539d50869753f7f14d50d5437825c4f10bd3af1f031fc02d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee"} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5fea50a9f57d2e539d50869753f7f14d50d5437825c4f10bd3af1f031fc02d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/610a4bd3a1df453036132868f64bba613843bca8521c205fa99a9044b0f05207"} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"610a4bd3a1df453036132868f64bba613843bca8521c205fa99a9044b0f05207","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5fea50a9f57d2e539d50869753f7f14d50d5437825c4f10bd3af1f031fc02d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5fea50a9f57d2e539d50869753f7f14d50d5437825c4f10bd3af1f031fc02d3"} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5fea50a9f57d2e539d50869753f7f14d50d5437825c4f10bd3af1f031fc02d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5fea50a9f57d2e539d50869753f7f14d50d5437825c4f10bd3af1f031fc02d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5fea50a9f57d2e539d50869753f7f14d50d5437825c4f10bd3af1f031fc02d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee"} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5fea50a9f57d2e539d50869753f7f14d50d5437825c4f10bd3af1f031fc02d3"} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5fea50a9f57d2e539d50869753f7f14d50d5437825c4f10bd3af1f031fc02d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5fea50a9f57d2e539d50869753f7f14d50d5437825c4f10bd3af1f031fc02d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee"} {"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5fea50a9f57d2e539d50869753f7f14d50d5437825c4f10bd3af1f031fc02d3"} {"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee"} {"level":"debug","ts":"2026-07-15T14:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe"} {"level":"info","ts":"2026-07-15T14:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe"} {"level":"debug","ts":"2026-07-15T14:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe"} {"level":"debug","ts":"2026-07-15T14:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb504ade6ea538c835385419dd575f5fef736947228dc911ca30f2183adff60b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe"} {"level":"debug","ts":"2026-07-15T14:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb504ade6ea538c835385419dd575f5fef736947228dc911ca30f2183adff60b"} {"level":"debug","ts":"2026-07-15T14:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7270cc37a983e412d6b303c56db94b34fa7b6daa290547a549634ffff3e81959","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe"} {"level":"info","ts":"2026-07-15T14:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7270cc37a983e412d6b303c56db94b34fa7b6daa290547a549634ffff3e81959"} {"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4"} {"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4"} {"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4"} {"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4"} {"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4b001d2f6b7ec72656d6779fb80c388420599e54613eabdc6603bdc1fa34926","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4"} {"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4b001d2f6b7ec72656d6779fb80c388420599e54613eabdc6603bdc1fa34926"} {"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4"} {"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4"} {"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4"} {"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4"} {"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4"} {"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88"} {"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88"} {"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4"} {"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88"} {"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4"} {"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88"} {"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06b8811ef5f6053af0dc45b62b5734093cf5c13e941c8ae9536cdf49286ea009"} {"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4"} {"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06b8811ef5f6053af0dc45b62b5734093cf5c13e941c8ae9536cdf49286ea009","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88"} {"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88"} {"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27b17c6fbaa2515ff97f3a2cbe3ff5f7ab2c48295e7120c7dd303b25c8bf4f65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27b17c6fbaa2515ff97f3a2cbe3ff5f7ab2c48295e7120c7dd303b25c8bf4f65"} {"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88"} {"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27b17c6fbaa2515ff97f3a2cbe3ff5f7ab2c48295e7120c7dd303b25c8bf4f65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27b17c6fbaa2515ff97f3a2cbe3ff5f7ab2c48295e7120c7dd303b25c8bf4f65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27b17c6fbaa2515ff97f3a2cbe3ff5f7ab2c48295e7120c7dd303b25c8bf4f65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27b17c6fbaa2515ff97f3a2cbe3ff5f7ab2c48295e7120c7dd303b25c8bf4f65"} {"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27b17c6fbaa2515ff97f3a2cbe3ff5f7ab2c48295e7120c7dd303b25c8bf4f65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27b17c6fbaa2515ff97f3a2cbe3ff5f7ab2c48295e7120c7dd303b25c8bf4f65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27b17c6fbaa2515ff97f3a2cbe3ff5f7ab2c48295e7120c7dd303b25c8bf4f65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"27b17c6fbaa2515ff97f3a2cbe3ff5f7ab2c48295e7120c7dd303b25c8bf4f65","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"27b17c6fbaa2515ff97f3a2cbe3ff5f7ab2c48295e7120c7dd303b25c8bf4f65\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27b17c6fbaa2515ff97f3a2cbe3ff5f7ab2c48295e7120c7dd303b25c8bf4f65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27b17c6fbaa2515ff97f3a2cbe3ff5f7ab2c48295e7120c7dd303b25c8bf4f65"} {"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27b17c6fbaa2515ff97f3a2cbe3ff5f7ab2c48295e7120c7dd303b25c8bf4f65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5fea50a9f57d2e539d50869753f7f14d50d5437825c4f10bd3af1f031fc02d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5fea50a9f57d2e539d50869753f7f14d50d5437825c4f10bd3af1f031fc02d3"} {"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5fea50a9f57d2e539d50869753f7f14d50d5437825c4f10bd3af1f031fc02d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27b17c6fbaa2515ff97f3a2cbe3ff5f7ab2c48295e7120c7dd303b25c8bf4f65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5fea50a9f57d2e539d50869753f7f14d50d5437825c4f10bd3af1f031fc02d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5fea50a9f57d2e539d50869753f7f14d50d5437825c4f10bd3af1f031fc02d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27b17c6fbaa2515ff97f3a2cbe3ff5f7ab2c48295e7120c7dd303b25c8bf4f65"} {"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5fea50a9f57d2e539d50869753f7f14d50d5437825c4f10bd3af1f031fc02d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5fea50a9f57d2e539d50869753f7f14d50d5437825c4f10bd3af1f031fc02d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5fea50a9f57d2e539d50869753f7f14d50d5437825c4f10bd3af1f031fc02d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5fea50a9f57d2e539d50869753f7f14d50d5437825c4f10bd3af1f031fc02d3"} {"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5fea50a9f57d2e539d50869753f7f14d50d5437825c4f10bd3af1f031fc02d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27b17c6fbaa2515ff97f3a2cbe3ff5f7ab2c48295e7120c7dd303b25c8bf4f65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27b17c6fbaa2515ff97f3a2cbe3ff5f7ab2c48295e7120c7dd303b25c8bf4f65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5fea50a9f57d2e539d50869753f7f14d50d5437825c4f10bd3af1f031fc02d3"} {"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27b17c6fbaa2515ff97f3a2cbe3ff5f7ab2c48295e7120c7dd303b25c8bf4f65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5fea50a9f57d2e539d50869753f7f14d50d5437825c4f10bd3af1f031fc02d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27b17c6fbaa2515ff97f3a2cbe3ff5f7ab2c48295e7120c7dd303b25c8bf4f65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2535aaf092aa6a5180be482c651366ddd6d080fcfe691c11d5a94d5412eda107","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5fea50a9f57d2e539d50869753f7f14d50d5437825c4f10bd3af1f031fc02d3"} {"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5fea50a9f57d2e539d50869753f7f14d50d5437825c4f10bd3af1f031fc02d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5fea50a9f57d2e539d50869753f7f14d50d5437825c4f10bd3af1f031fc02d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5fea50a9f57d2e539d50869753f7f14d50d5437825c4f10bd3af1f031fc02d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5fea50a9f57d2e539d50869753f7f14d50d5437825c4f10bd3af1f031fc02d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27b17c6fbaa2515ff97f3a2cbe3ff5f7ab2c48295e7120c7dd303b25c8bf4f65"} {"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2535aaf092aa6a5180be482c651366ddd6d080fcfe691c11d5a94d5412eda107"} {"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5fea50a9f57d2e539d50869753f7f14d50d5437825c4f10bd3af1f031fc02d3"} {"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37ff2eb7d1808abf0dd31168586383fb10b39d67a308fb992f2e3652d68a6878","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee"} {"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28aa865198b5033eb2156a1797fbfb1e76bcc540d61ba4c44b9901dde7c84b62","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37ff2eb7d1808abf0dd31168586383fb10b39d67a308fb992f2e3652d68a6878"} {"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f46a4fcb9a5ed8d773595e3237f2963753da010dae35cc71c5f80b30b664c54e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28aa865198b5033eb2156a1797fbfb1e76bcc540d61ba4c44b9901dde7c84b62"} {"level":"debug","ts":"2026-07-15T14:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea58aa547ef6b9aaa6b708b0990053957ad167a9bd03fde3a00755e162d31a0e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f46a4fcb9a5ed8d773595e3237f2963753da010dae35cc71c5f80b30b664c54e"} {"level":"info","ts":"2026-07-15T14:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea58aa547ef6b9aaa6b708b0990053957ad167a9bd03fde3a00755e162d31a0e"} {"level":"debug","ts":"2026-07-15T14:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54c4e4e9699a87e9ef835d46b3b36fd50fd3e35342be318b87c5b1dc8ff50e7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54c4e4e9699a87e9ef835d46b3b36fd50fd3e35342be318b87c5b1dc8ff50e7c"} {"level":"info","ts":"2026-07-15T14:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54c4e4e9699a87e9ef835d46b3b36fd50fd3e35342be318b87c5b1dc8ff50e7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91c45c7c1b952cbf304c2476c5a472a8ee739cc6175626c6216a1284250210bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91c45c7c1b952cbf304c2476c5a472a8ee739cc6175626c6216a1284250210bd"} {"level":"info","ts":"2026-07-15T14:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91c45c7c1b952cbf304c2476c5a472a8ee739cc6175626c6216a1284250210bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54c4e4e9699a87e9ef835d46b3b36fd50fd3e35342be318b87c5b1dc8ff50e7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91c45c7c1b952cbf304c2476c5a472a8ee739cc6175626c6216a1284250210bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91c45c7c1b952cbf304c2476c5a472a8ee739cc6175626c6216a1284250210bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91c45c7c1b952cbf304c2476c5a472a8ee739cc6175626c6216a1284250210bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f230fc3442a176708db750afd04a52e5dba760f5776040f0e8b60ca86a57df9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54c4e4e9699a87e9ef835d46b3b36fd50fd3e35342be318b87c5b1dc8ff50e7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91c45c7c1b952cbf304c2476c5a472a8ee739cc6175626c6216a1284250210bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91c45c7c1b952cbf304c2476c5a472a8ee739cc6175626c6216a1284250210bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-15T14:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"91c45c7c1b952cbf304c2476c5a472a8ee739cc6175626c6216a1284250210bd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"91c45c7c1b952cbf304c2476c5a472a8ee739cc6175626c6216a1284250210bd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T14:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95501a656d1aee514bb342890d56077a3f5d50eae70581b6e2ffa1293b5d71e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91c45c7c1b952cbf304c2476c5a472a8ee739cc6175626c6216a1284250210bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91c45c7c1b952cbf304c2476c5a472a8ee739cc6175626c6216a1284250210bd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54c4e4e9699a87e9ef835d46b3b36fd50fd3e35342be318b87c5b1dc8ff50e7c"} {"level":"debug","ts":"2026-07-15T14:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54c4e4e9699a87e9ef835d46b3b36fd50fd3e35342be318b87c5b1dc8ff50e7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54c4e4e9699a87e9ef835d46b3b36fd50fd3e35342be318b87c5b1dc8ff50e7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T14:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54c4e4e9699a87e9ef835d46b3b36fd50fd3e35342be318b87c5b1dc8ff50e7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15889e9fa52af83bc9c03a0ab288dc073230e512a9c05ce8e3de2bb5d4475714","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54c4e4e9699a87e9ef835d46b3b36fd50fd3e35342be318b87c5b1dc8ff50e7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4973306b384733a61a9112bc9e26aa87b36772d6e8b6618ba867f9564843f4d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91c45c7c1b952cbf304c2476c5a472a8ee739cc6175626c6216a1284250210bd"} {"level":"debug","ts":"2026-07-15T14:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16157c6d5824de47fcec7555dfa9e39a2617c27f18aee04c681c33bae7cc0cb8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f230fc3442a176708db750afd04a52e5dba760f5776040f0e8b60ca86a57df9"} {"level":"info","ts":"2026-07-15T14:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95501a656d1aee514bb342890d56077a3f5d50eae70581b6e2ffa1293b5d71e0"} {"level":"debug","ts":"2026-07-15T14:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd6565f39e2a640ab9cf3f30411e59d15d46ff620350f431aa286f7783860b14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T14:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"610a4bd3a1df453036132868f64bba613843bca8521c205fa99a9044b0f05207","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T14:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15889e9fa52af83bc9c03a0ab288dc073230e512a9c05ce8e3de2bb5d4475714"} {"level":"info","ts":"2026-07-15T14:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54c4e4e9699a87e9ef835d46b3b36fd50fd3e35342be318b87c5b1dc8ff50e7c"} {"level":"info","ts":"2026-07-15T14:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4973306b384733a61a9112bc9e26aa87b36772d6e8b6618ba867f9564843f4d"} {"level":"info","ts":"2026-07-15T14:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16157c6d5824de47fcec7555dfa9e39a2617c27f18aee04c681c33bae7cc0cb8"} {"level":"info","ts":"2026-07-15T14:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd6565f39e2a640ab9cf3f30411e59d15d46ff620350f431aa286f7783860b14"} {"level":"info","ts":"2026-07-15T14:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/610a4bd3a1df453036132868f64bba613843bca8521c205fa99a9044b0f05207"} {"level":"info","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e33a971d-3216-439a-8b20-5c5bbc391369","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53508","PortSpecifier":{"PortValue":53508}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e33a971d-3216-439a-8b20-5c5bbc391369","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e33a971d-3216-439a-8b20-5c5bbc391369","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53508","PortSpecifier":{"PortValue":53508}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784124990,"nanos":151611450},"http":{"id":"e33a971d-3216-439a-8b20-5c5bbc391369","method":"POST","headers":{":authority":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e33a971d-3216-439a-8b20-5c5bbc391369","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e33a971d-3216-439a-8b20-5c5bbc391369","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"34acd1b1-d11c-4700-9be9-1507d93f5695","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6662a338-e456-488d-8970-2d47aeede02a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1aa8eda4e980"]}} {"level":"debug","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e33a971d-3216-439a-8b20-5c5bbc391369","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1aa8eda4e980"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6662a338-e456-488d-8970-2d47aeede02a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"34acd1b1-d11c-4700-9be9-1507d93f5695","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"27b17c6fbaa2515ff97f3a2cbe3ff5f7ab2c48295e7120c7dd303b25c8bf4f65"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e33a971d-3216-439a-8b20-5c5bbc391369","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e33a971d-3216-439a-8b20-5c5bbc391369","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e33a971d-3216-439a-8b20-5c5bbc391369","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2723e9/rate-test-model-2723e9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2723e9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e33a971d-3216-439a-8b20-5c5bbc391369","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e33a971d-3216-439a-8b20-5c5bbc391369","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e33a971d-3216-439a-8b20-5c5bbc391369","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e33a971d-3216-439a-8b20-5c5bbc391369","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e33a971d-3216-439a-8b20-5c5bbc391369","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a1c5f9f0-eb42-461c-9c9b-096a2a5aeba6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39648","PortSpecifier":{"PortValue":39648}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a1c5f9f0-eb42-461c-9c9b-096a2a5aeba6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-bfdd40.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a1c5f9f0-eb42-461c-9c9b-096a2a5aeba6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39648","PortSpecifier":{"PortValue":39648}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784124990,"nanos":197805664},"http":{"id":"a1c5f9f0-eb42-461c-9c9b-096a2a5aeba6","method":"POST","headers":{":authority":"e2e-shared-b-bfdd40.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a1c5f9f0-eb42-461c-9c9b-096a2a5aeba6","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a1c5f9f0-eb42-461c-9c9b-096a2a5aeba6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"34acd1b1-d11c-4700-9be9-1507d93f5695","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6662a338-e456-488d-8970-2d47aeede02a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1aa8eda4e980"]}} {"level":"debug","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a1c5f9f0-eb42-461c-9c9b-096a2a5aeba6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1aa8eda4e980"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6662a338-e456-488d-8970-2d47aeede02a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"34acd1b1-d11c-4700-9be9-1507d93f5695","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"16157c6d5824de47fcec7555dfa9e39a2617c27f18aee04c681c33bae7cc0cb8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-bfdd40.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1c5f9f0-eb42-461c-9c9b-096a2a5aeba6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1c5f9f0-eb42-461c-9c9b-096a2a5aeba6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1c5f9f0-eb42-461c-9c9b-096a2a5aeba6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-bfdd40/rate-test-model-bfdd40\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-bfdd40/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a1c5f9f0-eb42-461c-9c9b-096a2a5aeba6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1c5f9f0-eb42-461c-9c9b-096a2a5aeba6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1c5f9f0-eb42-461c-9c9b-096a2a5aeba6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a1c5f9f0-eb42-461c-9c9b-096a2a5aeba6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a1c5f9f0-eb42-461c-9c9b-096a2a5aeba6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0de8ba60-dff7-4f7a-874b-8ab80d95ed55","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53522","PortSpecifier":{"PortValue":53522}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0de8ba60-dff7-4f7a-874b-8ab80d95ed55","method":"POST","path":"/ai-tenant-e2e-shared-a-2723e9/rate-test-model-2723e9/v1/completions","host":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0de8ba60-dff7-4f7a-874b-8ab80d95ed55","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53522","PortSpecifier":{"PortValue":53522}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784124990,"nanos":248977061},"http":{"id":"0de8ba60-dff7-4f7a-874b-8ab80d95ed55","method":"POST","headers":{":authority":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2723e9/rate-test-model-2723e9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0de8ba60-dff7-4f7a-874b-8ab80d95ed55","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-642G1mwnTM3nFbwP_ENSB45cQoxrB97v9lMrtZfKY7BOJRercvRHeML0pcgY"} {"level":"debug","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0de8ba60-dff7-4f7a-874b-8ab80d95ed55","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2723e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-642G1mwnTM3nFbwP_ENSB45cQoxrB97v9lMrtZfKY7BOJRercvRHeML0pcgY\"}"} {"level":"debug","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0de8ba60-dff7-4f7a-874b-8ab80d95ed55","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2723e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8d146d7d-667e-467f-a1e2-bb2cf1045e9c","keyName":"e2e-rate-a-8c380b","subscription":"e2e-rate-iso-a-8c380b","tenant":"e2e-shared-a-2723e9","userId":"8d146d7d-667e-467f-a1e2-bb2cf1045e9c","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0de8ba60-dff7-4f7a-874b-8ab80d95ed55","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2723e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2723e9/rate-test-model-2723e9\",\"requestedSubscription\":\"e2e-rate-iso-a-8c380b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0de8ba60-dff7-4f7a-874b-8ab80d95ed55","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2723e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2723e9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8c380b","namespace":"ai-tenant-e2e-shared-a-2723e9","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0de8ba60-dff7-4f7a-874b-8ab80d95ed55","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0de8ba60-dff7-4f7a-874b-8ab80d95ed55","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0de8ba60-dff7-4f7a-874b-8ab80d95ed55","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0de8ba60-dff7-4f7a-874b-8ab80d95ed55","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2723e9/rate-test-model-2723e9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2723e9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0de8ba60-dff7-4f7a-874b-8ab80d95ed55","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0de8ba60-dff7-4f7a-874b-8ab80d95ed55","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0de8ba60-dff7-4f7a-874b-8ab80d95ed55","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0de8ba60-dff7-4f7a-874b-8ab80d95ed55","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8c380b"} {"level":"debug","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0de8ba60-dff7-4f7a-874b-8ab80d95ed55","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8d146d7d-667e-467f-a1e2-bb2cf1045e9c","keyName":"e2e-rate-a-8c380b","selected_subscription":"e2e-rate-iso-a-8c380b","selected_subscription_key":"ai-tenant-e2e-shared-a-2723e9/e2e-rate-iso-a-8c380b@ai-tenant-e2e-shared-a-2723e9/rate-test-model-2723e9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2723e9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8c380b","namespace":"ai-tenant-e2e-shared-a-2723e9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0de8ba60-dff7-4f7a-874b-8ab80d95ed55","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0de8ba60-dff7-4f7a-874b-8ab80d95ed55","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T14:16:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1ea4725-4258-4376-b1a2-45f8f2fc684b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53538","PortSpecifier":{"PortValue":53538}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c1ea4725-4258-4376-b1a2-45f8f2fc684b","method":"POST","path":"/ai-tenant-e2e-shared-a-2723e9/rate-test-model-2723e9/v1/completions","host":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T14:16:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1ea4725-4258-4376-b1a2-45f8f2fc684b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53538","PortSpecifier":{"PortValue":53538}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784124991,"nanos":313013216},"http":{"id":"c1ea4725-4258-4376-b1a2-45f8f2fc684b","method":"POST","headers":{":authority":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2723e9/rate-test-model-2723e9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:16:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c1ea4725-4258-4376-b1a2-45f8f2fc684b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-642G1mwnTM3nFbwP_ENSB45cQoxrB97v9lMrtZfKY7BOJRercvRHeML0pcgY"} {"level":"debug","ts":"2026-07-15T14:16:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c1ea4725-4258-4376-b1a2-45f8f2fc684b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2723e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-642G1mwnTM3nFbwP_ENSB45cQoxrB97v9lMrtZfKY7BOJRercvRHeML0pcgY\"}"} {"level":"debug","ts":"2026-07-15T14:16:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c1ea4725-4258-4376-b1a2-45f8f2fc684b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2723e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8d146d7d-667e-467f-a1e2-bb2cf1045e9c","keyName":"e2e-rate-a-8c380b","subscription":"e2e-rate-iso-a-8c380b","tenant":"e2e-shared-a-2723e9","userId":"8d146d7d-667e-467f-a1e2-bb2cf1045e9c","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-15T14:16:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c1ea4725-4258-4376-b1a2-45f8f2fc684b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2723e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2723e9/rate-test-model-2723e9\",\"requestedSubscription\":\"e2e-rate-iso-a-8c380b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-15T14:16:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c1ea4725-4258-4376-b1a2-45f8f2fc684b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2723e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2723e9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8c380b","namespace":"ai-tenant-e2e-shared-a-2723e9","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-15T14:16:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c1ea4725-4258-4376-b1a2-45f8f2fc684b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:16:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1ea4725-4258-4376-b1a2-45f8f2fc684b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:16:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1ea4725-4258-4376-b1a2-45f8f2fc684b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:16:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1ea4725-4258-4376-b1a2-45f8f2fc684b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:16:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1ea4725-4258-4376-b1a2-45f8f2fc684b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2723e9/rate-test-model-2723e9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2723e9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:16:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1ea4725-4258-4376-b1a2-45f8f2fc684b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T14:16:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1ea4725-4258-4376-b1a2-45f8f2fc684b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8c380b"} {"level":"debug","ts":"2026-07-15T14:16:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1ea4725-4258-4376-b1a2-45f8f2fc684b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T14:16:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1ea4725-4258-4376-b1a2-45f8f2fc684b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8d146d7d-667e-467f-a1e2-bb2cf1045e9c","keyName":"e2e-rate-a-8c380b","selected_subscription":"e2e-rate-iso-a-8c380b","selected_subscription_key":"ai-tenant-e2e-shared-a-2723e9/e2e-rate-iso-a-8c380b@ai-tenant-e2e-shared-a-2723e9/rate-test-model-2723e9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2723e9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8c380b","namespace":"ai-tenant-e2e-shared-a-2723e9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-15T14:16:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1ea4725-4258-4376-b1a2-45f8f2fc684b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T14:16:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1ea4725-4258-4376-b1a2-45f8f2fc684b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T14:16:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a4ea9683-917f-4c94-9720-910995e44808","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53540","PortSpecifier":{"PortValue":53540}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a4ea9683-917f-4c94-9720-910995e44808","method":"POST","path":"/ai-tenant-e2e-shared-a-2723e9/rate-test-model-2723e9/v1/completions","host":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T14:16:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a4ea9683-917f-4c94-9720-910995e44808","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53540","PortSpecifier":{"PortValue":53540}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784124992,"nanos":355856444},"http":{"id":"a4ea9683-917f-4c94-9720-910995e44808","method":"POST","headers":{":authority":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2723e9/rate-test-model-2723e9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:16:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a4ea9683-917f-4c94-9720-910995e44808","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-642G1mwnTM3nFbwP_ENSB45cQoxrB97v9lMrtZfKY7BOJRercvRHeML0pcgY"} {"level":"debug","ts":"2026-07-15T14:16:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a4ea9683-917f-4c94-9720-910995e44808","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2723e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-642G1mwnTM3nFbwP_ENSB45cQoxrB97v9lMrtZfKY7BOJRercvRHeML0pcgY\"}"} {"level":"debug","ts":"2026-07-15T14:16:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a4ea9683-917f-4c94-9720-910995e44808","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2723e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8d146d7d-667e-467f-a1e2-bb2cf1045e9c","keyName":"e2e-rate-a-8c380b","subscription":"e2e-rate-iso-a-8c380b","tenant":"e2e-shared-a-2723e9","userId":"8d146d7d-667e-467f-a1e2-bb2cf1045e9c","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-15T14:16:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a4ea9683-917f-4c94-9720-910995e44808","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2723e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2723e9/rate-test-model-2723e9\",\"requestedSubscription\":\"e2e-rate-iso-a-8c380b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-15T14:16:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a4ea9683-917f-4c94-9720-910995e44808","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2723e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2723e9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8c380b","namespace":"ai-tenant-e2e-shared-a-2723e9","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-15T14:16:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a4ea9683-917f-4c94-9720-910995e44808","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:16:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4ea9683-917f-4c94-9720-910995e44808","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:16:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4ea9683-917f-4c94-9720-910995e44808","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:16:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4ea9683-917f-4c94-9720-910995e44808","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2723e9/rate-test-model-2723e9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2723e9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:16:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4ea9683-917f-4c94-9720-910995e44808","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:16:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a4ea9683-917f-4c94-9720-910995e44808","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T14:16:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a4ea9683-917f-4c94-9720-910995e44808","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T14:16:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a4ea9683-917f-4c94-9720-910995e44808","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8c380b"} {"level":"debug","ts":"2026-07-15T14:16:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a4ea9683-917f-4c94-9720-910995e44808","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8d146d7d-667e-467f-a1e2-bb2cf1045e9c","keyName":"e2e-rate-a-8c380b","selected_subscription":"e2e-rate-iso-a-8c380b","selected_subscription_key":"ai-tenant-e2e-shared-a-2723e9/e2e-rate-iso-a-8c380b@ai-tenant-e2e-shared-a-2723e9/rate-test-model-2723e9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2723e9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8c380b","namespace":"ai-tenant-e2e-shared-a-2723e9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-15T14:16:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a4ea9683-917f-4c94-9720-910995e44808","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T14:16:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a4ea9683-917f-4c94-9720-910995e44808","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"59e82e2b-3f96-4137-854a-7f2833af6426","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:45162","PortSpecifier":{"PortValue":45162}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"59e82e2b-3f96-4137-854a-7f2833af6426","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"59e82e2b-3f96-4137-854a-7f2833af6426","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:45162","PortSpecifier":{"PortValue":45162}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784125006,"nanos":360804135},"http":{"id":"59e82e2b-3f96-4137-854a-7f2833af6426","method":"POST","headers":{":authority":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"59e82e2b-3f96-4137-854a-7f2833af6426","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"59e82e2b-3f96-4137-854a-7f2833af6426","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"34acd1b1-d11c-4700-9be9-1507d93f5695","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6662a338-e456-488d-8970-2d47aeede02a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1aa8eda4e980"]}} {"level":"debug","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"59e82e2b-3f96-4137-854a-7f2833af6426","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1aa8eda4e980"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6662a338-e456-488d-8970-2d47aeede02a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"34acd1b1-d11c-4700-9be9-1507d93f5695","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"27b17c6fbaa2515ff97f3a2cbe3ff5f7ab2c48295e7120c7dd303b25c8bf4f65"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59e82e2b-3f96-4137-854a-7f2833af6426","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59e82e2b-3f96-4137-854a-7f2833af6426","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59e82e2b-3f96-4137-854a-7f2833af6426","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2723e9/rate-test-model-2723e9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2723e9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"59e82e2b-3f96-4137-854a-7f2833af6426","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59e82e2b-3f96-4137-854a-7f2833af6426","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59e82e2b-3f96-4137-854a-7f2833af6426","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"59e82e2b-3f96-4137-854a-7f2833af6426","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"59e82e2b-3f96-4137-854a-7f2833af6426","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9e2394bc-1034-4616-bef8-cabd923965d6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49516","PortSpecifier":{"PortValue":49516}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9e2394bc-1034-4616-bef8-cabd923965d6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-bfdd40.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9e2394bc-1034-4616-bef8-cabd923965d6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49516","PortSpecifier":{"PortValue":49516}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784125006,"nanos":409691003},"http":{"id":"9e2394bc-1034-4616-bef8-cabd923965d6","method":"POST","headers":{":authority":"e2e-shared-b-bfdd40.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9e2394bc-1034-4616-bef8-cabd923965d6","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9e2394bc-1034-4616-bef8-cabd923965d6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"34acd1b1-d11c-4700-9be9-1507d93f5695","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6662a338-e456-488d-8970-2d47aeede02a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1aa8eda4e980"]}} {"level":"debug","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9e2394bc-1034-4616-bef8-cabd923965d6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1aa8eda4e980"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6662a338-e456-488d-8970-2d47aeede02a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"34acd1b1-d11c-4700-9be9-1507d93f5695","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"16157c6d5824de47fcec7555dfa9e39a2617c27f18aee04c681c33bae7cc0cb8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-bfdd40.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e2394bc-1034-4616-bef8-cabd923965d6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e2394bc-1034-4616-bef8-cabd923965d6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e2394bc-1034-4616-bef8-cabd923965d6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-bfdd40/rate-test-model-bfdd40\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-bfdd40/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9e2394bc-1034-4616-bef8-cabd923965d6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e2394bc-1034-4616-bef8-cabd923965d6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e2394bc-1034-4616-bef8-cabd923965d6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9e2394bc-1034-4616-bef8-cabd923965d6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9e2394bc-1034-4616-bef8-cabd923965d6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3c5ee6e0-6c26-43c6-bcbe-82f5b9e270a4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:45172","PortSpecifier":{"PortValue":45172}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3c5ee6e0-6c26-43c6-bcbe-82f5b9e270a4","method":"POST","path":"/ai-tenant-e2e-shared-a-2723e9/rate-test-model-2723e9/v1/completions","host":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3c5ee6e0-6c26-43c6-bcbe-82f5b9e270a4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:45172","PortSpecifier":{"PortValue":45172}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784125006,"nanos":457290380},"http":{"id":"3c5ee6e0-6c26-43c6-bcbe-82f5b9e270a4","method":"POST","headers":{":authority":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2723e9/rate-test-model-2723e9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3c5ee6e0-6c26-43c6-bcbe-82f5b9e270a4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-r6r6kk7mVKSyjg7A_PxJYkdy7gUsM8kWEY1R9CCL1w3Z4YIxYCR1KpcNbDWf"} {"level":"debug","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3c5ee6e0-6c26-43c6-bcbe-82f5b9e270a4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2723e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-r6r6kk7mVKSyjg7A_PxJYkdy7gUsM8kWEY1R9CCL1w3Z4YIxYCR1KpcNbDWf\"}"} {"level":"debug","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3c5ee6e0-6c26-43c6-bcbe-82f5b9e270a4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2723e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5b7fe071-4954-4c24-a038-dba25559f58b","keyName":"e2e-rate-a-00d403","subscription":"e2e-rate-iso-a-00d403","tenant":"e2e-shared-a-2723e9","userId":"5b7fe071-4954-4c24-a038-dba25559f58b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3c5ee6e0-6c26-43c6-bcbe-82f5b9e270a4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2723e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2723e9/rate-test-model-2723e9\",\"requestedSubscription\":\"e2e-rate-iso-a-00d403\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3c5ee6e0-6c26-43c6-bcbe-82f5b9e270a4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2723e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2723e9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-00d403","namespace":"ai-tenant-e2e-shared-a-2723e9","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3c5ee6e0-6c26-43c6-bcbe-82f5b9e270a4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c5ee6e0-6c26-43c6-bcbe-82f5b9e270a4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c5ee6e0-6c26-43c6-bcbe-82f5b9e270a4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c5ee6e0-6c26-43c6-bcbe-82f5b9e270a4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c5ee6e0-6c26-43c6-bcbe-82f5b9e270a4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2723e9/rate-test-model-2723e9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2723e9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c5ee6e0-6c26-43c6-bcbe-82f5b9e270a4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c5ee6e0-6c26-43c6-bcbe-82f5b9e270a4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-00d403"} {"level":"debug","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c5ee6e0-6c26-43c6-bcbe-82f5b9e270a4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c5ee6e0-6c26-43c6-bcbe-82f5b9e270a4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5b7fe071-4954-4c24-a038-dba25559f58b","keyName":"e2e-rate-a-00d403","selected_subscription":"e2e-rate-iso-a-00d403","selected_subscription_key":"ai-tenant-e2e-shared-a-2723e9/e2e-rate-iso-a-00d403@ai-tenant-e2e-shared-a-2723e9/rate-test-model-2723e9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2723e9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-00d403","namespace":"ai-tenant-e2e-shared-a-2723e9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3c5ee6e0-6c26-43c6-bcbe-82f5b9e270a4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3c5ee6e0-6c26-43c6-bcbe-82f5b9e270a4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T14:16:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0db7ef3c-439a-47b8-b24b-56b716ba759f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:45188","PortSpecifier":{"PortValue":45188}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0db7ef3c-439a-47b8-b24b-56b716ba759f","method":"POST","path":"/ai-tenant-e2e-shared-a-2723e9/rate-test-model-2723e9/v1/completions","host":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T14:16:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0db7ef3c-439a-47b8-b24b-56b716ba759f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:45188","PortSpecifier":{"PortValue":45188}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784125007,"nanos":497110256},"http":{"id":"0db7ef3c-439a-47b8-b24b-56b716ba759f","method":"POST","headers":{":authority":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2723e9/rate-test-model-2723e9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:16:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0db7ef3c-439a-47b8-b24b-56b716ba759f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-r6r6kk7mVKSyjg7A_PxJYkdy7gUsM8kWEY1R9CCL1w3Z4YIxYCR1KpcNbDWf"} {"level":"debug","ts":"2026-07-15T14:16:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0db7ef3c-439a-47b8-b24b-56b716ba759f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2723e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-r6r6kk7mVKSyjg7A_PxJYkdy7gUsM8kWEY1R9CCL1w3Z4YIxYCR1KpcNbDWf\"}"} {"level":"debug","ts":"2026-07-15T14:16:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0db7ef3c-439a-47b8-b24b-56b716ba759f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2723e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5b7fe071-4954-4c24-a038-dba25559f58b","keyName":"e2e-rate-a-00d403","subscription":"e2e-rate-iso-a-00d403","tenant":"e2e-shared-a-2723e9","userId":"5b7fe071-4954-4c24-a038-dba25559f58b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-15T14:16:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0db7ef3c-439a-47b8-b24b-56b716ba759f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2723e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2723e9/rate-test-model-2723e9\",\"requestedSubscription\":\"e2e-rate-iso-a-00d403\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-15T14:16:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0db7ef3c-439a-47b8-b24b-56b716ba759f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2723e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2723e9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-00d403","namespace":"ai-tenant-e2e-shared-a-2723e9","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-15T14:16:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0db7ef3c-439a-47b8-b24b-56b716ba759f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:16:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0db7ef3c-439a-47b8-b24b-56b716ba759f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:16:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0db7ef3c-439a-47b8-b24b-56b716ba759f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:16:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0db7ef3c-439a-47b8-b24b-56b716ba759f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2723e9/rate-test-model-2723e9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2723e9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:16:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0db7ef3c-439a-47b8-b24b-56b716ba759f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:16:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0db7ef3c-439a-47b8-b24b-56b716ba759f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T14:16:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0db7ef3c-439a-47b8-b24b-56b716ba759f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-00d403"} {"level":"debug","ts":"2026-07-15T14:16:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0db7ef3c-439a-47b8-b24b-56b716ba759f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T14:16:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0db7ef3c-439a-47b8-b24b-56b716ba759f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5b7fe071-4954-4c24-a038-dba25559f58b","keyName":"e2e-rate-a-00d403","selected_subscription":"e2e-rate-iso-a-00d403","selected_subscription_key":"ai-tenant-e2e-shared-a-2723e9/e2e-rate-iso-a-00d403@ai-tenant-e2e-shared-a-2723e9/rate-test-model-2723e9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2723e9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-00d403","namespace":"ai-tenant-e2e-shared-a-2723e9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-15T14:16:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0db7ef3c-439a-47b8-b24b-56b716ba759f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T14:16:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0db7ef3c-439a-47b8-b24b-56b716ba759f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T14:16:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"03dd007c-285b-451a-b0c3-066ca4147138","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:45204","PortSpecifier":{"PortValue":45204}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"03dd007c-285b-451a-b0c3-066ca4147138","method":"POST","path":"/ai-tenant-e2e-shared-a-2723e9/rate-test-model-2723e9/v1/completions","host":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T14:16:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"03dd007c-285b-451a-b0c3-066ca4147138","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:45204","PortSpecifier":{"PortValue":45204}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784125008,"nanos":540463464},"http":{"id":"03dd007c-285b-451a-b0c3-066ca4147138","method":"POST","headers":{":authority":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2723e9/rate-test-model-2723e9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:16:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"03dd007c-285b-451a-b0c3-066ca4147138","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-r6r6kk7mVKSyjg7A_PxJYkdy7gUsM8kWEY1R9CCL1w3Z4YIxYCR1KpcNbDWf"} {"level":"debug","ts":"2026-07-15T14:16:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"03dd007c-285b-451a-b0c3-066ca4147138","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2723e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-r6r6kk7mVKSyjg7A_PxJYkdy7gUsM8kWEY1R9CCL1w3Z4YIxYCR1KpcNbDWf\"}"} {"level":"debug","ts":"2026-07-15T14:16:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"03dd007c-285b-451a-b0c3-066ca4147138","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2723e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5b7fe071-4954-4c24-a038-dba25559f58b","keyName":"e2e-rate-a-00d403","subscription":"e2e-rate-iso-a-00d403","tenant":"e2e-shared-a-2723e9","userId":"5b7fe071-4954-4c24-a038-dba25559f58b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-15T14:16:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"03dd007c-285b-451a-b0c3-066ca4147138","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2723e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2723e9/rate-test-model-2723e9\",\"requestedSubscription\":\"e2e-rate-iso-a-00d403\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-15T14:16:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"03dd007c-285b-451a-b0c3-066ca4147138","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2723e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2723e9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-00d403","namespace":"ai-tenant-e2e-shared-a-2723e9","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-15T14:16:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"03dd007c-285b-451a-b0c3-066ca4147138","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:16:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03dd007c-285b-451a-b0c3-066ca4147138","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:16:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03dd007c-285b-451a-b0c3-066ca4147138","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:16:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03dd007c-285b-451a-b0c3-066ca4147138","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:16:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03dd007c-285b-451a-b0c3-066ca4147138","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2723e9/rate-test-model-2723e9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2723e9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:16:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03dd007c-285b-451a-b0c3-066ca4147138","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T14:16:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03dd007c-285b-451a-b0c3-066ca4147138","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T14:16:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03dd007c-285b-451a-b0c3-066ca4147138","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-00d403"} {"level":"debug","ts":"2026-07-15T14:16:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03dd007c-285b-451a-b0c3-066ca4147138","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5b7fe071-4954-4c24-a038-dba25559f58b","keyName":"e2e-rate-a-00d403","selected_subscription":"e2e-rate-iso-a-00d403","selected_subscription_key":"ai-tenant-e2e-shared-a-2723e9/e2e-rate-iso-a-00d403@ai-tenant-e2e-shared-a-2723e9/rate-test-model-2723e9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2723e9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-00d403","namespace":"ai-tenant-e2e-shared-a-2723e9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-15T14:16:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"03dd007c-285b-451a-b0c3-066ca4147138","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T14:16:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"03dd007c-285b-451a-b0c3-066ca4147138","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T14:16:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b6a9b447-7a84-4ba1-a8e7-f8b1d0819682","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49522","PortSpecifier":{"PortValue":49522}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b6a9b447-7a84-4ba1-a8e7-f8b1d0819682","method":"POST","path":"/ai-tenant-e2e-shared-b-bfdd40/rate-test-model-bfdd40/v1/completions","host":"e2e-shared-b-bfdd40.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T14:16:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b6a9b447-7a84-4ba1-a8e7-f8b1d0819682","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49522","PortSpecifier":{"PortValue":49522}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784125008,"nanos":576465280},"http":{"id":"b6a9b447-7a84-4ba1-a8e7-f8b1d0819682","method":"POST","headers":{":authority":"e2e-shared-b-bfdd40.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-bfdd40/rate-test-model-bfdd40/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:16:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b6a9b447-7a84-4ba1-a8e7-f8b1d0819682","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1KNs8Dd5MfeqRL4Dt_a5fUuHASw8IpeRFZ766VP3IFLdBfZwCZgpFDi0qHTLy"} {"level":"debug","ts":"2026-07-15T14:16:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b6a9b447-7a84-4ba1-a8e7-f8b1d0819682","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-bfdd40.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1KNs8Dd5MfeqRL4Dt_a5fUuHASw8IpeRFZ766VP3IFLdBfZwCZgpFDi0qHTLy\"}"} {"level":"debug","ts":"2026-07-15T14:16:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b6a9b447-7a84-4ba1-a8e7-f8b1d0819682","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-bfdd40.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1b5eb6f8-1da7-42d7-a63f-97199e89b586","keyName":"e2e-rate-b-00d403","subscription":"e2e-rate-iso-b-00d403","tenant":"e2e-shared-b-bfdd40","userId":"1b5eb6f8-1da7-42d7-a63f-97199e89b586","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-15T14:16:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b6a9b447-7a84-4ba1-a8e7-f8b1d0819682","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-bfdd40.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-bfdd40/rate-test-model-bfdd40\",\"requestedSubscription\":\"e2e-rate-iso-b-00d403\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-15T14:16:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b6a9b447-7a84-4ba1-a8e7-f8b1d0819682","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-bfdd40.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-bfdd40","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-00d403","namespace":"ai-tenant-e2e-shared-b-bfdd40","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-15T14:16:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b6a9b447-7a84-4ba1-a8e7-f8b1d0819682","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T14:16:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b6a9b447-7a84-4ba1-a8e7-f8b1d0819682","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:16:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b6a9b447-7a84-4ba1-a8e7-f8b1d0819682","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:16:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b6a9b447-7a84-4ba1-a8e7-f8b1d0819682","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-bfdd40/rate-test-model-bfdd40\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-bfdd40/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:16:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b6a9b447-7a84-4ba1-a8e7-f8b1d0819682","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T14:16:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b6a9b447-7a84-4ba1-a8e7-f8b1d0819682","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T14:16:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b6a9b447-7a84-4ba1-a8e7-f8b1d0819682","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T14:16:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b6a9b447-7a84-4ba1-a8e7-f8b1d0819682","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-00d403"} {"level":"debug","ts":"2026-07-15T14:16:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b6a9b447-7a84-4ba1-a8e7-f8b1d0819682","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1b5eb6f8-1da7-42d7-a63f-97199e89b586","keyName":"e2e-rate-b-00d403","selected_subscription":"e2e-rate-iso-b-00d403","selected_subscription_key":"ai-tenant-e2e-shared-b-bfdd40/e2e-rate-iso-b-00d403@ai-tenant-e2e-shared-b-bfdd40/rate-test-model-bfdd40","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-bfdd40","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-00d403","namespace":"ai-tenant-e2e-shared-b-bfdd40","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-15T14:16:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b6a9b447-7a84-4ba1-a8e7-f8b1d0819682","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T14:16:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b6a9b447-7a84-4ba1-a8e7-f8b1d0819682","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T14:16:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/54c4e4e9699a87e9ef835d46b3b36fd50fd3e35342be318b87c5b1dc8ff50e7c"} {"level":"info","ts":"2026-07-15T14:16:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0f230fc3442a176708db750afd04a52e5dba760f5776040f0e8b60ca86a57df9"} {"level":"info","ts":"2026-07-15T14:16:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/95501a656d1aee514bb342890d56077a3f5d50eae70581b6e2ffa1293b5d71e0"} {"level":"info","ts":"2026-07-15T14:16:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/06b8811ef5f6053af0dc45b62b5734093cf5c13e941c8ae9536cdf49286ea009"} {"level":"info","ts":"2026-07-15T14:16:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e5fea50a9f57d2e539d50869753f7f14d50d5437825c4f10bd3af1f031fc02d3"} {"level":"info","ts":"2026-07-15T14:16:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/610a4bd3a1df453036132868f64bba613843bca8521c205fa99a9044b0f05207"} {"level":"info","ts":"2026-07-15T14:16:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/37ff2eb7d1808abf0dd31168586383fb10b39d67a308fb992f2e3652d68a6878"} {"level":"info","ts":"2026-07-15T14:16:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7270cc37a983e412d6b303c56db94b34fa7b6daa290547a549634ffff3e81959"} {"level":"info","ts":"2026-07-15T14:16:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f46a4fcb9a5ed8d773595e3237f2963753da010dae35cc71c5f80b30b664c54e"} {"level":"info","ts":"2026-07-15T14:16:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee"} {"level":"info","ts":"2026-07-15T14:16:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/91c45c7c1b952cbf304c2476c5a472a8ee739cc6175626c6216a1284250210bd"} {"level":"info","ts":"2026-07-15T14:16:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/28aa865198b5033eb2156a1797fbfb1e76bcc540d61ba4c44b9901dde7c84b62"} {"level":"info","ts":"2026-07-15T14:16:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4"} {"level":"info","ts":"2026-07-15T14:16:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bb504ade6ea538c835385419dd575f5fef736947228dc911ca30f2183adff60b"} {"level":"info","ts":"2026-07-15T14:16:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88"} {"level":"info","ts":"2026-07-15T14:16:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cd6565f39e2a640ab9cf3f30411e59d15d46ff620350f431aa286f7783860b14"} {"level":"info","ts":"2026-07-15T14:17:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2535aaf092aa6a5180be482c651366ddd6d080fcfe691c11d5a94d5412eda107"} {"level":"info","ts":"2026-07-15T14:17:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/15889e9fa52af83bc9c03a0ab288dc073230e512a9c05ce8e3de2bb5d4475714"} {"level":"info","ts":"2026-07-15T14:17:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d4b001d2f6b7ec72656d6779fb80c388420599e54613eabdc6603bdc1fa34926"} {"level":"info","ts":"2026-07-15T14:17:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/27b17c6fbaa2515ff97f3a2cbe3ff5f7ab2c48295e7120c7dd303b25c8bf4f65"} {"level":"info","ts":"2026-07-15T14:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f4973306b384733a61a9112bc9e26aa87b36772d6e8b6618ba867f9564843f4d"} {"level":"info","ts":"2026-07-15T14:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ea58aa547ef6b9aaa6b708b0990053957ad167a9bd03fde3a00755e162d31a0e"} {"level":"info","ts":"2026-07-15T14:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/16157c6d5824de47fcec7555dfa9e39a2617c27f18aee04c681c33bae7cc0cb8"} {"level":"info","ts":"2026-07-15T14:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe"}