--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"debug","ts":"2026-07-24T02:12:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:12:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439"} {"level":"debug","ts":"2026-07-24T02:12:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:12:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:12:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:12:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:12:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:12:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439"} {"level":"debug","ts":"2026-07-24T02:12:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:12:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439"} {"level":"debug","ts":"2026-07-24T02:12:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:12:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:12:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:12:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:12:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:12:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:12:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439"} {"level":"info","ts":"2026-07-24T02:12:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:12:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:12:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3"} {"level":"info","ts":"2026-07-24T02:12:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:12:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:12:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:12:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:12:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439"} {"level":"info","ts":"2026-07-24T02:12:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:12:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:12:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3"} {"level":"info","ts":"2026-07-24T02:12:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:12:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:12:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:12:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:12:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439"} {"level":"error","ts":"2026-07-24T02:12:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T02:12:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:12:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:12:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3"} {"level":"info","ts":"2026-07-24T02:12:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:12:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:12:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:12:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3"} {"level":"debug","ts":"2026-07-24T02:12:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:12:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:12:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439"} {"level":"info","ts":"2026-07-24T02:12:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:12:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:12:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3"} {"level":"info","ts":"2026-07-24T02:12:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:12:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3"} {"level":"debug","ts":"2026-07-24T02:12:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:12:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:12:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:12:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3"} {"level":"debug","ts":"2026-07-24T02:12:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:12:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:12:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:12:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da"} {"level":"debug","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da"} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3"} {"level":"debug","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3"} {"level":"debug","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da"} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3"} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9755d5572cc167b7e1442a4b1dc1c9502468db57c2bca1885198cf8dc4cac93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da"} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9755d5572cc167b7e1442a4b1dc1c9502468db57c2bca1885198cf8dc4cac93","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3"} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9755d5572cc167b7e1442a4b1dc1c9502468db57c2bca1885198cf8dc4cac93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9755d5572cc167b7e1442a4b1dc1c9502468db57c2bca1885198cf8dc4cac93","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9755d5572cc167b7e1442a4b1dc1c9502468db57c2bca1885198cf8dc4cac93","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9755d5572cc167b7e1442a4b1dc1c9502468db57c2bca1885198cf8dc4cac93","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9755d5572cc167b7e1442a4b1dc1c9502468db57c2bca1885198cf8dc4cac93"} {"level":"debug","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9755d5572cc167b7e1442a4b1dc1c9502468db57c2bca1885198cf8dc4cac93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9755d5572cc167b7e1442a4b1dc1c9502468db57c2bca1885198cf8dc4cac93"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9755d5572cc167b7e1442a4b1dc1c9502468db57c2bca1885198cf8dc4cac93","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9755d5572cc167b7e1442a4b1dc1c9502468db57c2bca1885198cf8dc4cac93","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da"} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9755d5572cc167b7e1442a4b1dc1c9502468db57c2bca1885198cf8dc4cac93"} {"level":"debug","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7"} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7"} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7"} {"level":"debug","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"545ccff71500a2921dd842a704bea6112ed0fb34437a278c0dc029f8061bf6fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"545ccff71500a2921dd842a704bea6112ed0fb34437a278c0dc029f8061bf6fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"545ccff71500a2921dd842a704bea6112ed0fb34437a278c0dc029f8061bf6fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/545ccff71500a2921dd842a704bea6112ed0fb34437a278c0dc029f8061bf6fe"} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"545ccff71500a2921dd842a704bea6112ed0fb34437a278c0dc029f8061bf6fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"545ccff71500a2921dd842a704bea6112ed0fb34437a278c0dc029f8061bf6fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/545ccff71500a2921dd842a704bea6112ed0fb34437a278c0dc029f8061bf6fe"} {"level":"debug","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"545ccff71500a2921dd842a704bea6112ed0fb34437a278c0dc029f8061bf6fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["545ccff71500a2921dd842a704bea6112ed0fb34437a278c0dc029f8061bf6fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7"} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"545ccff71500a2921dd842a704bea6112ed0fb34437a278c0dc029f8061bf6fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"545ccff71500a2921dd842a704bea6112ed0fb34437a278c0dc029f8061bf6fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/545ccff71500a2921dd842a704bea6112ed0fb34437a278c0dc029f8061bf6fe"} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"545ccff71500a2921dd842a704bea6112ed0fb34437a278c0dc029f8061bf6fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"545ccff71500a2921dd842a704bea6112ed0fb34437a278c0dc029f8061bf6fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"545ccff71500a2921dd842a704bea6112ed0fb34437a278c0dc029f8061bf6fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85cf374d945ad05dcc51b429f1597475d0bdace0f5d6a245e87f811aad3fcece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/545ccff71500a2921dd842a704bea6112ed0fb34437a278c0dc029f8061bf6fe"} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85cf374d945ad05dcc51b429f1597475d0bdace0f5d6a245e87f811aad3fcece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"545ccff71500a2921dd842a704bea6112ed0fb34437a278c0dc029f8061bf6fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["545ccff71500a2921dd842a704bea6112ed0fb34437a278c0dc029f8061bf6fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85cf374d945ad05dcc51b429f1597475d0bdace0f5d6a245e87f811aad3fcece"} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"545ccff71500a2921dd842a704bea6112ed0fb34437a278c0dc029f8061bf6fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85cf374d945ad05dcc51b429f1597475d0bdace0f5d6a245e87f811aad3fcece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85cf374d945ad05dcc51b429f1597475d0bdace0f5d6a245e87f811aad3fcece"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/545ccff71500a2921dd842a704bea6112ed0fb34437a278c0dc029f8061bf6fe"} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85cf374d945ad05dcc51b429f1597475d0bdace0f5d6a245e87f811aad3fcece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"545ccff71500a2921dd842a704bea6112ed0fb34437a278c0dc029f8061bf6fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85cf374d945ad05dcc51b429f1597475d0bdace0f5d6a245e87f811aad3fcece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85cf374d945ad05dcc51b429f1597475d0bdace0f5d6a245e87f811aad3fcece"} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/545ccff71500a2921dd842a704bea6112ed0fb34437a278c0dc029f8061bf6fe"} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85cf374d945ad05dcc51b429f1597475d0bdace0f5d6a245e87f811aad3fcece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85cf374d945ad05dcc51b429f1597475d0bdace0f5d6a245e87f811aad3fcece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85cf374d945ad05dcc51b429f1597475d0bdace0f5d6a245e87f811aad3fcece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69009b28a14b44e6f53b9bb4d08d6fbbdb7120d9960bd83ea49c35baffff4241","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85cf374d945ad05dcc51b429f1597475d0bdace0f5d6a245e87f811aad3fcece"} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69009b28a14b44e6f53b9bb4d08d6fbbdb7120d9960bd83ea49c35baffff4241","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85cf374d945ad05dcc51b429f1597475d0bdace0f5d6a245e87f811aad3fcece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85cf374d945ad05dcc51b429f1597475d0bdace0f5d6a245e87f811aad3fcece"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69009b28a14b44e6f53b9bb4d08d6fbbdb7120d9960bd83ea49c35baffff4241"} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85cf374d945ad05dcc51b429f1597475d0bdace0f5d6a245e87f811aad3fcece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5832690479cbdd31c01e96846f87b1c5a209dcbb5d513c059a7013ce5453c8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85cf374d945ad05dcc51b429f1597475d0bdace0f5d6a245e87f811aad3fcece"} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5832690479cbdd31c01e96846f87b1c5a209dcbb5d513c059a7013ce5453c8e"} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5832690479cbdd31c01e96846f87b1c5a209dcbb5d513c059a7013ce5453c8e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69009b28a14b44e6f53b9bb4d08d6fbbdb7120d9960bd83ea49c35baffff4241","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69009b28a14b44e6f53b9bb4d08d6fbbdb7120d9960bd83ea49c35baffff4241","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85cf374d945ad05dcc51b429f1597475d0bdace0f5d6a245e87f811aad3fcece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5832690479cbdd31c01e96846f87b1c5a209dcbb5d513c059a7013ce5453c8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5832690479cbdd31c01e96846f87b1c5a209dcbb5d513c059a7013ce5453c8e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69009b28a14b44e6f53b9bb4d08d6fbbdb7120d9960bd83ea49c35baffff4241"} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5832690479cbdd31c01e96846f87b1c5a209dcbb5d513c059a7013ce5453c8e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69009b28a14b44e6f53b9bb4d08d6fbbdb7120d9960bd83ea49c35baffff4241","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69009b28a14b44e6f53b9bb4d08d6fbbdb7120d9960bd83ea49c35baffff4241"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85cf374d945ad05dcc51b429f1597475d0bdace0f5d6a245e87f811aad3fcece"} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69009b28a14b44e6f53b9bb4d08d6fbbdb7120d9960bd83ea49c35baffff4241","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3576d64aec989a084e35fb7c7c2fc8502d45ef917eabaa21fee248c3797d389","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5832690479cbdd31c01e96846f87b1c5a209dcbb5d513c059a7013ce5453c8e"} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3576d64aec989a084e35fb7c7c2fc8502d45ef917eabaa21fee248c3797d389","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5832690479cbdd31c01e96846f87b1c5a209dcbb5d513c059a7013ce5453c8e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96daf4fb9b5f7d042aa81dbe7394c5ccf3024be9d6a73412aaaf700581d3353e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96daf4fb9b5f7d042aa81dbe7394c5ccf3024be9d6a73412aaaf700581d3353e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69009b28a14b44e6f53b9bb4d08d6fbbdb7120d9960bd83ea49c35baffff4241","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69009b28a14b44e6f53b9bb4d08d6fbbdb7120d9960bd83ea49c35baffff4241"} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69009b28a14b44e6f53b9bb4d08d6fbbdb7120d9960bd83ea49c35baffff4241","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30df344886bf608848b6221bde80ba46b4a5cb0102a85ea3e4e71eed43b15546","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3576d64aec989a084e35fb7c7c2fc8502d45ef917eabaa21fee248c3797d389"} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30df344886bf608848b6221bde80ba46b4a5cb0102a85ea3e4e71eed43b15546","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3576d64aec989a084e35fb7c7c2fc8502d45ef917eabaa21fee248c3797d389","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b3576d64aec989a084e35fb7c7c2fc8502d45ef917eabaa21fee248c3797d389"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96daf4fb9b5f7d042aa81dbe7394c5ccf3024be9d6a73412aaaf700581d3353e"} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3576d64aec989a084e35fb7c7c2fc8502d45ef917eabaa21fee248c3797d389","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96daf4fb9b5f7d042aa81dbe7394c5ccf3024be9d6a73412aaaf700581d3353e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["96daf4fb9b5f7d042aa81dbe7394c5ccf3024be9d6a73412aaaf700581d3353e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96daf4fb9b5f7d042aa81dbe7394c5ccf3024be9d6a73412aaaf700581d3353e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69009b28a14b44e6f53b9bb4d08d6fbbdb7120d9960bd83ea49c35baffff4241","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69009b28a14b44e6f53b9bb4d08d6fbbdb7120d9960bd83ea49c35baffff4241"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30df344886bf608848b6221bde80ba46b4a5cb0102a85ea3e4e71eed43b15546"} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69009b28a14b44e6f53b9bb4d08d6fbbdb7120d9960bd83ea49c35baffff4241","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30df344886bf608848b6221bde80ba46b4a5cb0102a85ea3e4e71eed43b15546","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30df344886bf608848b6221bde80ba46b4a5cb0102a85ea3e4e71eed43b15546"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69009b28a14b44e6f53b9bb4d08d6fbbdb7120d9960bd83ea49c35baffff4241"} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30df344886bf608848b6221bde80ba46b4a5cb0102a85ea3e4e71eed43b15546","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3576d64aec989a084e35fb7c7c2fc8502d45ef917eabaa21fee248c3797d389","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3576d64aec989a084e35fb7c7c2fc8502d45ef917eabaa21fee248c3797d389"} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3576d64aec989a084e35fb7c7c2fc8502d45ef917eabaa21fee248c3797d389","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96daf4fb9b5f7d042aa81dbe7394c5ccf3024be9d6a73412aaaf700581d3353e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96daf4fb9b5f7d042aa81dbe7394c5ccf3024be9d6a73412aaaf700581d3353e"} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69009b28a14b44e6f53b9bb4d08d6fbbdb7120d9960bd83ea49c35baffff4241"} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96daf4fb9b5f7d042aa81dbe7394c5ccf3024be9d6a73412aaaf700581d3353e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69009b28a14b44e6f53b9bb4d08d6fbbdb7120d9960bd83ea49c35baffff4241","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30df344886bf608848b6221bde80ba46b4a5cb0102a85ea3e4e71eed43b15546","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30df344886bf608848b6221bde80ba46b4a5cb0102a85ea3e4e71eed43b15546"} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3576d64aec989a084e35fb7c7c2fc8502d45ef917eabaa21fee248c3797d389"} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30df344886bf608848b6221bde80ba46b4a5cb0102a85ea3e4e71eed43b15546","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3576d64aec989a084e35fb7c7c2fc8502d45ef917eabaa21fee248c3797d389","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:12:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b3576d64aec989a084e35fb7c7c2fc8502d45ef917eabaa21fee248c3797d389"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96daf4fb9b5f7d042aa81dbe7394c5ccf3024be9d6a73412aaaf700581d3353e"} {"level":"info","ts":"2026-07-24T02:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30df344886bf608848b6221bde80ba46b4a5cb0102a85ea3e4e71eed43b15546"} {"level":"info","ts":"2026-07-24T02:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3576d64aec989a084e35fb7c7c2fc8502d45ef917eabaa21fee248c3797d389","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96daf4fb9b5f7d042aa81dbe7394c5ccf3024be9d6a73412aaaf700581d3353e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:12:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:12:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["96daf4fb9b5f7d042aa81dbe7394c5ccf3024be9d6a73412aaaf700581d3353e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3576d64aec989a084e35fb7c7c2fc8502d45ef917eabaa21fee248c3797d389"} {"level":"info","ts":"2026-07-24T02:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96daf4fb9b5f7d042aa81dbe7394c5ccf3024be9d6a73412aaaf700581d3353e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30df344886bf608848b6221bde80ba46b4a5cb0102a85ea3e4e71eed43b15546","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:12:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:12:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30df344886bf608848b6221bde80ba46b4a5cb0102a85ea3e4e71eed43b15546"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96daf4fb9b5f7d042aa81dbe7394c5ccf3024be9d6a73412aaaf700581d3353e"} {"level":"info","ts":"2026-07-24T02:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30df344886bf608848b6221bde80ba46b4a5cb0102a85ea3e4e71eed43b15546","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3576d64aec989a084e35fb7c7c2fc8502d45ef917eabaa21fee248c3797d389","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96daf4fb9b5f7d042aa81dbe7394c5ccf3024be9d6a73412aaaf700581d3353e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30df344886bf608848b6221bde80ba46b4a5cb0102a85ea3e4e71eed43b15546","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:12:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:12:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30df344886bf608848b6221bde80ba46b4a5cb0102a85ea3e4e71eed43b15546"} {"level":"info","ts":"2026-07-24T02:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30df344886bf608848b6221bde80ba46b4a5cb0102a85ea3e4e71eed43b15546","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30df344886bf608848b6221bde80ba46b4a5cb0102a85ea3e4e71eed43b15546","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:12:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:12:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30df344886bf608848b6221bde80ba46b4a5cb0102a85ea3e4e71eed43b15546"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30df344886bf608848b6221bde80ba46b4a5cb0102a85ea3e4e71eed43b15546"} {"level":"info","ts":"2026-07-24T02:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30df344886bf608848b6221bde80ba46b4a5cb0102a85ea3e4e71eed43b15546","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30df344886bf608848b6221bde80ba46b4a5cb0102a85ea3e4e71eed43b15546","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:12:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:12:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30df344886bf608848b6221bde80ba46b4a5cb0102a85ea3e4e71eed43b15546"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30df344886bf608848b6221bde80ba46b4a5cb0102a85ea3e4e71eed43b15546"} {"level":"error","ts":"2026-07-24T02:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"30df344886bf608848b6221bde80ba46b4a5cb0102a85ea3e4e71eed43b15546","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"30df344886bf608848b6221bde80ba46b4a5cb0102a85ea3e4e71eed43b15546\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T02:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30df344886bf608848b6221bde80ba46b4a5cb0102a85ea3e4e71eed43b15546","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30df344886bf608848b6221bde80ba46b4a5cb0102a85ea3e4e71eed43b15546","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:12:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"474a1097-404c-423a-8e3e-6b2636bf653b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:43852","PortSpecifier":{"PortValue":43852}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"474a1097-404c-423a-8e3e-6b2636bf653b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6bcabd.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T02:12:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"474a1097-404c-423a-8e3e-6b2636bf653b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:43852","PortSpecifier":{"PortValue":43852}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784859133,"nanos":905963491},"http":{"id":"474a1097-404c-423a-8e3e-6b2636bf653b","method":"POST","headers":{":authority":"e2e-shared-a-6bcabd.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T02:12:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"474a1097-404c-423a-8e3e-6b2636bf653b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T02:12:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"474a1097-404c-423a-8e3e-6b2636bf653b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f29f66c2-a19e-4465-a7c7-78c9c558bf70","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=418f119d-8728-4d81-ae00-6c04fed31bc9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/28c99b380518"]}} {"level":"debug","ts":"2026-07-24T02:12:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"474a1097-404c-423a-8e3e-6b2636bf653b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/28c99b380518"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=418f119d-8728-4d81-ae00-6c04fed31bc9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f29f66c2-a19e-4465-a7c7-78c9c558bf70","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"69a983cbe0fdee8993f347b0025e355a2839922c5c626600fc22ab314a0ba716"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.81:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6bcabd.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T02:12:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"474a1097-404c-423a-8e3e-6b2636bf653b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:12:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"474a1097-404c-423a-8e3e-6b2636bf653b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:12:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"474a1097-404c-423a-8e3e-6b2636bf653b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6bcabd/auth-test-model-6bcabd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6bcabd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:12:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"474a1097-404c-423a-8e3e-6b2636bf653b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T02:12:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"474a1097-404c-423a-8e3e-6b2636bf653b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T02:12:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"474a1097-404c-423a-8e3e-6b2636bf653b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T02:12:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"474a1097-404c-423a-8e3e-6b2636bf653b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T02:12:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"474a1097-404c-423a-8e3e-6b2636bf653b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T02:12:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c2408e14-5c10-4a09-9f05-35d6ec89a2f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:53974","PortSpecifier":{"PortValue":53974}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c2408e14-5c10-4a09-9f05-35d6ec89a2f2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a7fbc1.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T02:12:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c2408e14-5c10-4a09-9f05-35d6ec89a2f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:53974","PortSpecifier":{"PortValue":53974}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784859133,"nanos":945990632},"http":{"id":"c2408e14-5c10-4a09-9f05-35d6ec89a2f2","method":"POST","headers":{":authority":"e2e-shared-b-a7fbc1.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T02:12:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c2408e14-5c10-4a09-9f05-35d6ec89a2f2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T02:12:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c2408e14-5c10-4a09-9f05-35d6ec89a2f2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f29f66c2-a19e-4465-a7c7-78c9c558bf70","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=418f119d-8728-4d81-ae00-6c04fed31bc9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/28c99b380518"]}} {"level":"debug","ts":"2026-07-24T02:12:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c2408e14-5c10-4a09-9f05-35d6ec89a2f2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/28c99b380518"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=418f119d-8728-4d81-ae00-6c04fed31bc9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f29f66c2-a19e-4465-a7c7-78c9c558bf70","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a7fbc1.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T02:12:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2408e14-5c10-4a09-9f05-35d6ec89a2f2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:12:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2408e14-5c10-4a09-9f05-35d6ec89a2f2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:12:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2408e14-5c10-4a09-9f05-35d6ec89a2f2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a7fbc1/auth-test-model-a7fbc1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a7fbc1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:12:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c2408e14-5c10-4a09-9f05-35d6ec89a2f2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T02:12:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2408e14-5c10-4a09-9f05-35d6ec89a2f2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T02:12:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2408e14-5c10-4a09-9f05-35d6ec89a2f2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-24T02:12:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c2408e14-5c10-4a09-9f05-35d6ec89a2f2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T02:12:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c2408e14-5c10-4a09-9f05-35d6ec89a2f2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T02:12:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"37e7ba78-d652-46d5-a4ea-9d16c045f86c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:53986","PortSpecifier":{"PortValue":53986}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"37e7ba78-d652-46d5-a4ea-9d16c045f86c","method":"GET","path":"/maas-api/v1/api-keys/7abbb34f-6f89-4671-b039-9d09b85fbb03","host":"e2e-shared-b-a7fbc1.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T02:12:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"37e7ba78-d652-46d5-a4ea-9d16c045f86c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:53986","PortSpecifier":{"PortValue":53986}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784859133,"nanos":986907821},"http":{"id":"37e7ba78-d652-46d5-a4ea-9d16c045f86c","method":"GET","headers":{":authority":"e2e-shared-b-a7fbc1.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/7abbb34f-6f89-4671-b039-9d09b85fbb03",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T02:12:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"37e7ba78-d652-46d5-a4ea-9d16c045f86c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T02:12:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"37e7ba78-d652-46d5-a4ea-9d16c045f86c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f29f66c2-a19e-4465-a7c7-78c9c558bf70","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=418f119d-8728-4d81-ae00-6c04fed31bc9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/28c99b380518"]}} {"level":"debug","ts":"2026-07-24T02:12:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"37e7ba78-d652-46d5-a4ea-9d16c045f86c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/28c99b380518"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=418f119d-8728-4d81-ae00-6c04fed31bc9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f29f66c2-a19e-4465-a7c7-78c9c558bf70","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a7fbc1.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/7abbb34f-6f89-4671-b039-9d09b85fbb03",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T02:12:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37e7ba78-d652-46d5-a4ea-9d16c045f86c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:12:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37e7ba78-d652-46d5-a4ea-9d16c045f86c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:12:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37e7ba78-d652-46d5-a4ea-9d16c045f86c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a7fbc1/auth-test-model-a7fbc1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a7fbc1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:12:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"37e7ba78-d652-46d5-a4ea-9d16c045f86c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T02:12:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37e7ba78-d652-46d5-a4ea-9d16c045f86c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T02:12:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37e7ba78-d652-46d5-a4ea-9d16c045f86c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-24T02:12:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"37e7ba78-d652-46d5-a4ea-9d16c045f86c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T02:12:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"37e7ba78-d652-46d5-a4ea-9d16c045f86c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T02:12:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"345829d8-fddf-41f0-b414-494b841abc8a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:43866","PortSpecifier":{"PortValue":43866}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"345829d8-fddf-41f0-b414-494b841abc8a","method":"GET","path":"/maas-api/v1/api-keys/7abbb34f-6f89-4671-b039-9d09b85fbb03","host":"e2e-shared-a-6bcabd.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T02:12:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"345829d8-fddf-41f0-b414-494b841abc8a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:43866","PortSpecifier":{"PortValue":43866}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784859134,"nanos":45670579},"http":{"id":"345829d8-fddf-41f0-b414-494b841abc8a","method":"GET","headers":{":authority":"e2e-shared-a-6bcabd.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/7abbb34f-6f89-4671-b039-9d09b85fbb03",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T02:12:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"345829d8-fddf-41f0-b414-494b841abc8a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T02:12:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"345829d8-fddf-41f0-b414-494b841abc8a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f29f66c2-a19e-4465-a7c7-78c9c558bf70","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=418f119d-8728-4d81-ae00-6c04fed31bc9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/28c99b380518"]}} {"level":"debug","ts":"2026-07-24T02:12:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"345829d8-fddf-41f0-b414-494b841abc8a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/28c99b380518"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=418f119d-8728-4d81-ae00-6c04fed31bc9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f29f66c2-a19e-4465-a7c7-78c9c558bf70","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"69a983cbe0fdee8993f347b0025e355a2839922c5c626600fc22ab314a0ba716"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.81:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6bcabd.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/7abbb34f-6f89-4671-b039-9d09b85fbb03",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T02:12:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"345829d8-fddf-41f0-b414-494b841abc8a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:12:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"345829d8-fddf-41f0-b414-494b841abc8a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:12:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"345829d8-fddf-41f0-b414-494b841abc8a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6bcabd/auth-test-model-6bcabd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6bcabd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:12:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"345829d8-fddf-41f0-b414-494b841abc8a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T02:12:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"345829d8-fddf-41f0-b414-494b841abc8a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T02:12:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"345829d8-fddf-41f0-b414-494b841abc8a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T02:12:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"345829d8-fddf-41f0-b414-494b841abc8a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T02:12:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"345829d8-fddf-41f0-b414-494b841abc8a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T02:12:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b3576d64aec989a084e35fb7c7c2fc8502d45ef917eabaa21fee248c3797d389"} {"level":"info","ts":"2026-07-24T02:12:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/30df344886bf608848b6221bde80ba46b4a5cb0102a85ea3e4e71eed43b15546"} {"level":"info","ts":"2026-07-24T02:12:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/69009b28a14b44e6f53b9bb4d08d6fbbdb7120d9960bd83ea49c35baffff4241"} {"level":"info","ts":"2026-07-24T02:12:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b5832690479cbdd31c01e96846f87b1c5a209dcbb5d513c059a7013ce5453c8e"} {"level":"info","ts":"2026-07-24T02:12:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7"} {"level":"info","ts":"2026-07-24T02:12:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/85cf374d945ad05dcc51b429f1597475d0bdace0f5d6a245e87f811aad3fcece"} {"level":"info","ts":"2026-07-24T02:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e9755d5572cc167b7e1442a4b1dc1c9502468db57c2bca1885198cf8dc4cac93"} {"level":"info","ts":"2026-07-24T02:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3"} {"level":"info","ts":"2026-07-24T02:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439"} {"level":"info","ts":"2026-07-24T02:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/545ccff71500a2921dd842a704bea6112ed0fb34437a278c0dc029f8061bf6fe"} {"level":"info","ts":"2026-07-24T02:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da"} {"level":"info","ts":"2026-07-24T02:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/96daf4fb9b5f7d042aa81dbe7394c5ccf3024be9d6a73412aaaf700581d3353e"} {"level":"debug","ts":"2026-07-24T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96daf4fb9b5f7d042aa81dbe7394c5ccf3024be9d6a73412aaaf700581d3353e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:12:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:12:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96daf4fb9b5f7d042aa81dbe7394c5ccf3024be9d6a73412aaaf700581d3353e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96daf4fb9b5f7d042aa81dbe7394c5ccf3024be9d6a73412aaaf700581d3353e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:12:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:12:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96daf4fb9b5f7d042aa81dbe7394c5ccf3024be9d6a73412aaaf700581d3353e"} {"level":"info","ts":"2026-07-24T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96daf4fb9b5f7d042aa81dbe7394c5ccf3024be9d6a73412aaaf700581d3353e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96daf4fb9b5f7d042aa81dbe7394c5ccf3024be9d6a73412aaaf700581d3353e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:12:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:12:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96daf4fb9b5f7d042aa81dbe7394c5ccf3024be9d6a73412aaaf700581d3353e"} {"level":"error","ts":"2026-07-24T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"96daf4fb9b5f7d042aa81dbe7394c5ccf3024be9d6a73412aaaf700581d3353e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"96daf4fb9b5f7d042aa81dbe7394c5ccf3024be9d6a73412aaaf700581d3353e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96daf4fb9b5f7d042aa81dbe7394c5ccf3024be9d6a73412aaaf700581d3353e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96daf4fb9b5f7d042aa81dbe7394c5ccf3024be9d6a73412aaaf700581d3353e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96daf4fb9b5f7d042aa81dbe7394c5ccf3024be9d6a73412aaaf700581d3353e"} {"level":"debug","ts":"2026-07-24T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96daf4fb9b5f7d042aa81dbe7394c5ccf3024be9d6a73412aaaf700581d3353e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:12:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:12:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["96daf4fb9b5f7d042aa81dbe7394c5ccf3024be9d6a73412aaaf700581d3353e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96daf4fb9b5f7d042aa81dbe7394c5ccf3024be9d6a73412aaaf700581d3353e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96daf4fb9b5f7d042aa81dbe7394c5ccf3024be9d6a73412aaaf700581d3353e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96daf4fb9b5f7d042aa81dbe7394c5ccf3024be9d6a73412aaaf700581d3353e"} {"level":"debug","ts":"2026-07-24T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5832690479cbdd31c01e96846f87b1c5a209dcbb5d513c059a7013ce5453c8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:12:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:12:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5832690479cbdd31c01e96846f87b1c5a209dcbb5d513c059a7013ce5453c8e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5832690479cbdd31c01e96846f87b1c5a209dcbb5d513c059a7013ce5453c8e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5832690479cbdd31c01e96846f87b1c5a209dcbb5d513c059a7013ce5453c8e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5832690479cbdd31c01e96846f87b1c5a209dcbb5d513c059a7013ce5453c8e"} {"level":"debug","ts":"2026-07-24T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5832690479cbdd31c01e96846f87b1c5a209dcbb5d513c059a7013ce5453c8e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5832690479cbdd31c01e96846f87b1c5a209dcbb5d513c059a7013ce5453c8e"} {"level":"debug","ts":"2026-07-24T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5832690479cbdd31c01e96846f87b1c5a209dcbb5d513c059a7013ce5453c8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:12:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:12:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5832690479cbdd31c01e96846f87b1c5a209dcbb5d513c059a7013ce5453c8e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5832690479cbdd31c01e96846f87b1c5a209dcbb5d513c059a7013ce5453c8e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"545ccff71500a2921dd842a704bea6112ed0fb34437a278c0dc029f8061bf6fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:12:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:12:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"545ccff71500a2921dd842a704bea6112ed0fb34437a278c0dc029f8061bf6fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5832690479cbdd31c01e96846f87b1c5a209dcbb5d513c059a7013ce5453c8e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"545ccff71500a2921dd842a704bea6112ed0fb34437a278c0dc029f8061bf6fe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/545ccff71500a2921dd842a704bea6112ed0fb34437a278c0dc029f8061bf6fe"} {"level":"debug","ts":"2026-07-24T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"545ccff71500a2921dd842a704bea6112ed0fb34437a278c0dc029f8061bf6fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:12:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:12:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["545ccff71500a2921dd842a704bea6112ed0fb34437a278c0dc029f8061bf6fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"545ccff71500a2921dd842a704bea6112ed0fb34437a278c0dc029f8061bf6fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"545ccff71500a2921dd842a704bea6112ed0fb34437a278c0dc029f8061bf6fe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5832690479cbdd31c01e96846f87b1c5a209dcbb5d513c059a7013ce5453c8e"} {"level":"info","ts":"2026-07-24T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/545ccff71500a2921dd842a704bea6112ed0fb34437a278c0dc029f8061bf6fe"} {"level":"debug","ts":"2026-07-24T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85cf374d945ad05dcc51b429f1597475d0bdace0f5d6a245e87f811aad3fcece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:12:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:12:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85cf374d945ad05dcc51b429f1597475d0bdace0f5d6a245e87f811aad3fcece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85cf374d945ad05dcc51b429f1597475d0bdace0f5d6a245e87f811aad3fcece","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85cf374d945ad05dcc51b429f1597475d0bdace0f5d6a245e87f811aad3fcece"} {"level":"debug","ts":"2026-07-24T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85cf374d945ad05dcc51b429f1597475d0bdace0f5d6a245e87f811aad3fcece","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85cf374d945ad05dcc51b429f1597475d0bdace0f5d6a245e87f811aad3fcece"} {"level":"debug","ts":"2026-07-24T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85cf374d945ad05dcc51b429f1597475d0bdace0f5d6a245e87f811aad3fcece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:12:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:12:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85cf374d945ad05dcc51b429f1597475d0bdace0f5d6a245e87f811aad3fcece"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85cf374d945ad05dcc51b429f1597475d0bdace0f5d6a245e87f811aad3fcece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85cf374d945ad05dcc51b429f1597475d0bdace0f5d6a245e87f811aad3fcece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:12:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:12:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85cf374d945ad05dcc51b429f1597475d0bdace0f5d6a245e87f811aad3fcece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85cf374d945ad05dcc51b429f1597475d0bdace0f5d6a245e87f811aad3fcece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85cf374d945ad05dcc51b429f1597475d0bdace0f5d6a245e87f811aad3fcece","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85cf374d945ad05dcc51b429f1597475d0bdace0f5d6a245e87f811aad3fcece"} {"level":"debug","ts":"2026-07-24T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85cf374d945ad05dcc51b429f1597475d0bdace0f5d6a245e87f811aad3fcece","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85cf374d945ad05dcc51b429f1597475d0bdace0f5d6a245e87f811aad3fcece"} {"level":"debug","ts":"2026-07-24T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85cf374d945ad05dcc51b429f1597475d0bdace0f5d6a245e87f811aad3fcece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:12:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:12:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85cf374d945ad05dcc51b429f1597475d0bdace0f5d6a245e87f811aad3fcece"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85cf374d945ad05dcc51b429f1597475d0bdace0f5d6a245e87f811aad3fcece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85cf374d945ad05dcc51b429f1597475d0bdace0f5d6a245e87f811aad3fcece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:12:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:12:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85cf374d945ad05dcc51b429f1597475d0bdace0f5d6a245e87f811aad3fcece"} {"level":"info","ts":"2026-07-24T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85cf374d945ad05dcc51b429f1597475d0bdace0f5d6a245e87f811aad3fcece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85cf374d945ad05dcc51b429f1597475d0bdace0f5d6a245e87f811aad3fcece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:12:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:12:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85cf374d945ad05dcc51b429f1597475d0bdace0f5d6a245e87f811aad3fcece"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85cf374d945ad05dcc51b429f1597475d0bdace0f5d6a245e87f811aad3fcece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3576d64aec989a084e35fb7c7c2fc8502d45ef917eabaa21fee248c3797d389","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:12:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:12:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85cf374d945ad05dcc51b429f1597475d0bdace0f5d6a245e87f811aad3fcece"} {"level":"info","ts":"2026-07-24T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3576d64aec989a084e35fb7c7c2fc8502d45ef917eabaa21fee248c3797d389","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85cf374d945ad05dcc51b429f1597475d0bdace0f5d6a245e87f811aad3fcece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3576d64aec989a084e35fb7c7c2fc8502d45ef917eabaa21fee248c3797d389","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:12:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:12:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3576d64aec989a084e35fb7c7c2fc8502d45ef917eabaa21fee248c3797d389"} {"level":"info","ts":"2026-07-24T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3576d64aec989a084e35fb7c7c2fc8502d45ef917eabaa21fee248c3797d389","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3576d64aec989a084e35fb7c7c2fc8502d45ef917eabaa21fee248c3797d389","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:12:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:12:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b3576d64aec989a084e35fb7c7c2fc8502d45ef917eabaa21fee248c3797d389"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b3576d64aec989a084e35fb7c7c2fc8502d45ef917eabaa21fee248c3797d389","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b3576d64aec989a084e35fb7c7c2fc8502d45ef917eabaa21fee248c3797d389\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3576d64aec989a084e35fb7c7c2fc8502d45ef917eabaa21fee248c3797d389","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:12:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:12:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b3576d64aec989a084e35fb7c7c2fc8502d45ef917eabaa21fee248c3797d389"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85cf374d945ad05dcc51b429f1597475d0bdace0f5d6a245e87f811aad3fcece"} {"level":"info","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3576d64aec989a084e35fb7c7c2fc8502d45ef917eabaa21fee248c3797d389","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3576d64aec989a084e35fb7c7c2fc8502d45ef917eabaa21fee248c3797d389","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3576d64aec989a084e35fb7c7c2fc8502d45ef917eabaa21fee248c3797d389","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:12:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:12:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3576d64aec989a084e35fb7c7c2fc8502d45ef917eabaa21fee248c3797d389"} {"level":"info","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3576d64aec989a084e35fb7c7c2fc8502d45ef917eabaa21fee248c3797d389","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3576d64aec989a084e35fb7c7c2fc8502d45ef917eabaa21fee248c3797d389","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:12:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:12:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b3576d64aec989a084e35fb7c7c2fc8502d45ef917eabaa21fee248c3797d389","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b3576d64aec989a084e35fb7c7c2fc8502d45ef917eabaa21fee248c3797d389\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3576d64aec989a084e35fb7c7c2fc8502d45ef917eabaa21fee248c3797d389","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3576d64aec989a084e35fb7c7c2fc8502d45ef917eabaa21fee248c3797d389","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3576d64aec989a084e35fb7c7c2fc8502d45ef917eabaa21fee248c3797d389"} {"level":"info","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3576d64aec989a084e35fb7c7c2fc8502d45ef917eabaa21fee248c3797d389"} {"level":"debug","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3576d64aec989a084e35fb7c7c2fc8502d45ef917eabaa21fee248c3797d389","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:12:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:12:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b3576d64aec989a084e35fb7c7c2fc8502d45ef917eabaa21fee248c3797d389"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3576d64aec989a084e35fb7c7c2fc8502d45ef917eabaa21fee248c3797d389","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3576d64aec989a084e35fb7c7c2fc8502d45ef917eabaa21fee248c3797d389","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3576d64aec989a084e35fb7c7c2fc8502d45ef917eabaa21fee248c3797d389"} {"level":"debug","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:12:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:12:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:12:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:12:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7"} {"level":"info","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:12:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:12:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3"} {"level":"info","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:12:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:12:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:12:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:12:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7"} {"level":"info","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:12:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:12:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3"} {"level":"info","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:12:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:12:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:12:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:12:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7"} {"level":"error","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9755d5572cc167b7e1442a4b1dc1c9502468db57c2bca1885198cf8dc4cac93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:12:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:12:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9755d5572cc167b7e1442a4b1dc1c9502468db57c2bca1885198cf8dc4cac93","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:12:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:12:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3"} {"level":"info","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69009b28a14b44e6f53b9bb4d08d6fbbdb7120d9960bd83ea49c35baffff4241","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:12:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:12:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9755d5572cc167b7e1442a4b1dc1c9502468db57c2bca1885198cf8dc4cac93"} {"level":"info","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69009b28a14b44e6f53b9bb4d08d6fbbdb7120d9960bd83ea49c35baffff4241","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:12:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:12:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9755d5572cc167b7e1442a4b1dc1c9502468db57c2bca1885198cf8dc4cac93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:12:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:12:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9755d5572cc167b7e1442a4b1dc1c9502468db57c2bca1885198cf8dc4cac93"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69009b28a14b44e6f53b9bb4d08d6fbbdb7120d9960bd83ea49c35baffff4241"} {"level":"info","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9755d5572cc167b7e1442a4b1dc1c9502468db57c2bca1885198cf8dc4cac93","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30df344886bf608848b6221bde80ba46b4a5cb0102a85ea3e4e71eed43b15546","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:12:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:12:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30df344886bf608848b6221bde80ba46b4a5cb0102a85ea3e4e71eed43b15546"} {"level":"info","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30df344886bf608848b6221bde80ba46b4a5cb0102a85ea3e4e71eed43b15546","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69009b28a14b44e6f53b9bb4d08d6fbbdb7120d9960bd83ea49c35baffff4241","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:12:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:12:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69009b28a14b44e6f53b9bb4d08d6fbbdb7120d9960bd83ea49c35baffff4241"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3"} {"level":"info","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69009b28a14b44e6f53b9bb4d08d6fbbdb7120d9960bd83ea49c35baffff4241","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:12:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:12:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9755d5572cc167b7e1442a4b1dc1c9502468db57c2bca1885198cf8dc4cac93","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30df344886bf608848b6221bde80ba46b4a5cb0102a85ea3e4e71eed43b15546","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:12:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:12:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30df344886bf608848b6221bde80ba46b4a5cb0102a85ea3e4e71eed43b15546"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7"} {"level":"info","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30df344886bf608848b6221bde80ba46b4a5cb0102a85ea3e4e71eed43b15546","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:12:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:12:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69009b28a14b44e6f53b9bb4d08d6fbbdb7120d9960bd83ea49c35baffff4241"} {"level":"info","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69009b28a14b44e6f53b9bb4d08d6fbbdb7120d9960bd83ea49c35baffff4241","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:12:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:12:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:12:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:12:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9755d5572cc167b7e1442a4b1dc1c9502468db57c2bca1885198cf8dc4cac93"} {"level":"info","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:12:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:12:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30df344886bf608848b6221bde80ba46b4a5cb0102a85ea3e4e71eed43b15546"} {"level":"info","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30df344886bf608848b6221bde80ba46b4a5cb0102a85ea3e4e71eed43b15546","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:12:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:12:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439"} {"level":"info","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:12:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:12:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:12:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:12:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da"} {"level":"info","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:12:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:12:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7"} {"level":"info","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3"} {"level":"info","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439"} {"level":"info","ts":"2026-07-24T02:12:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da"} {"level":"info","ts":"2026-07-24T02:12:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1091b9d3-fd54-4015-80a8-6b143af89972","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:38380","PortSpecifier":{"PortValue":38380}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1091b9d3-fd54-4015-80a8-6b143af89972","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6bcabd.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T02:12:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1091b9d3-fd54-4015-80a8-6b143af89972","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:38380","PortSpecifier":{"PortValue":38380}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784859149,"nanos":438114816},"http":{"id":"1091b9d3-fd54-4015-80a8-6b143af89972","method":"POST","headers":{":authority":"e2e-shared-a-6bcabd.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T02:12:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1091b9d3-fd54-4015-80a8-6b143af89972","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T02:12:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1091b9d3-fd54-4015-80a8-6b143af89972","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f29f66c2-a19e-4465-a7c7-78c9c558bf70","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=418f119d-8728-4d81-ae00-6c04fed31bc9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/28c99b380518"]}} {"level":"debug","ts":"2026-07-24T02:12:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1091b9d3-fd54-4015-80a8-6b143af89972","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/28c99b380518"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=418f119d-8728-4d81-ae00-6c04fed31bc9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f29f66c2-a19e-4465-a7c7-78c9c558bf70","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"69a983cbe0fdee8993f347b0025e355a2839922c5c626600fc22ab314a0ba716"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.81:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6bcabd.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T02:12:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1091b9d3-fd54-4015-80a8-6b143af89972","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:12:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1091b9d3-fd54-4015-80a8-6b143af89972","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:12:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1091b9d3-fd54-4015-80a8-6b143af89972","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6bcabd/auth-test-model-6bcabd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6bcabd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:12:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1091b9d3-fd54-4015-80a8-6b143af89972","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T02:12:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1091b9d3-fd54-4015-80a8-6b143af89972","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T02:12:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1091b9d3-fd54-4015-80a8-6b143af89972","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T02:12:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1091b9d3-fd54-4015-80a8-6b143af89972","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T02:12:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1091b9d3-fd54-4015-80a8-6b143af89972","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T02:12:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bf699535-62f6-496e-a6dc-335f68f24795","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:38458","PortSpecifier":{"PortValue":38458}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bf699535-62f6-496e-a6dc-335f68f24795","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a7fbc1.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T02:12:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bf699535-62f6-496e-a6dc-335f68f24795","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:38458","PortSpecifier":{"PortValue":38458}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784859149,"nanos":474583568},"http":{"id":"bf699535-62f6-496e-a6dc-335f68f24795","method":"POST","headers":{":authority":"e2e-shared-b-a7fbc1.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T02:12:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bf699535-62f6-496e-a6dc-335f68f24795","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T02:12:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bf699535-62f6-496e-a6dc-335f68f24795","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f29f66c2-a19e-4465-a7c7-78c9c558bf70","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=418f119d-8728-4d81-ae00-6c04fed31bc9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/28c99b380518"]}} {"level":"debug","ts":"2026-07-24T02:12:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bf699535-62f6-496e-a6dc-335f68f24795","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/28c99b380518"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=418f119d-8728-4d81-ae00-6c04fed31bc9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f29f66c2-a19e-4465-a7c7-78c9c558bf70","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a7fbc1.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T02:12:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf699535-62f6-496e-a6dc-335f68f24795","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:12:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf699535-62f6-496e-a6dc-335f68f24795","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:12:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf699535-62f6-496e-a6dc-335f68f24795","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a7fbc1/auth-test-model-a7fbc1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a7fbc1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:12:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bf699535-62f6-496e-a6dc-335f68f24795","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T02:12:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf699535-62f6-496e-a6dc-335f68f24795","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T02:12:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf699535-62f6-496e-a6dc-335f68f24795","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-24T02:12:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bf699535-62f6-496e-a6dc-335f68f24795","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T02:12:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bf699535-62f6-496e-a6dc-335f68f24795","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T02:12:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"296f2057-874d-49fa-9dc6-afeeb8c46d77","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:38392","PortSpecifier":{"PortValue":38392}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"296f2057-874d-49fa-9dc6-afeeb8c46d77","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-6bcabd.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T02:12:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"296f2057-874d-49fa-9dc6-afeeb8c46d77","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:38392","PortSpecifier":{"PortValue":38392}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784859149,"nanos":512206678},"http":{"id":"296f2057-874d-49fa-9dc6-afeeb8c46d77","method":"POST","headers":{":authority":"e2e-shared-a-6bcabd.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T02:12:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"296f2057-874d-49fa-9dc6-afeeb8c46d77","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1HpGL8Kj8D6eRnLmQ_3YuTopyoerkmJaWl8PMcWS9Uwp5JRr0U1AZr9dwG1wS"} {"level":"debug","ts":"2026-07-24T02:12:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"296f2057-874d-49fa-9dc6-afeeb8c46d77","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6bcabd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1HpGL8Kj8D6eRnLmQ_3YuTopyoerkmJaWl8PMcWS9Uwp5JRr0U1AZr9dwG1wS\"}"} {"level":"debug","ts":"2026-07-24T02:12:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"296f2057-874d-49fa-9dc6-afeeb8c46d77","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6bcabd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4235897f-4cba-447e-92eb-339ce5ada210","keyName":"e2e-auth-iso-a-6ae6a7","subscription":"e2e-auth-iso-caa9d8","tenant":"e2e-shared-a-6bcabd","userId":"4235897f-4cba-447e-92eb-339ce5ada210","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T02:12:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"296f2057-874d-49fa-9dc6-afeeb8c46d77","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T02:12:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"296f2057-874d-49fa-9dc6-afeeb8c46d77","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:12:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"296f2057-874d-49fa-9dc6-afeeb8c46d77","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:12:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"296f2057-874d-49fa-9dc6-afeeb8c46d77","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6bcabd/auth-test-model-6bcabd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6bcabd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:12:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"296f2057-874d-49fa-9dc6-afeeb8c46d77","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-24T02:12:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"296f2057-874d-49fa-9dc6-afeeb8c46d77","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T02:12:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"296f2057-874d-49fa-9dc6-afeeb8c46d77","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-caa9d8"} {"level":"debug","ts":"2026-07-24T02:12:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"296f2057-874d-49fa-9dc6-afeeb8c46d77","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T02:12:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"296f2057-874d-49fa-9dc6-afeeb8c46d77","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T02:12:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"296f2057-874d-49fa-9dc6-afeeb8c46d77","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T02:12:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b83cbae08bdbcbbb874b2ede49d32b5ccc3b192d828ac034dd3539ea5255463"} {"level":"info","ts":"2026-07-24T02:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/545ccff71500a2921dd842a704bea6112ed0fb34437a278c0dc029f8061bf6fe"} {"level":"info","ts":"2026-07-24T02:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/85cf374d945ad05dcc51b429f1597475d0bdace0f5d6a245e87f811aad3fcece"} {"level":"info","ts":"2026-07-24T02:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/69009b28a14b44e6f53b9bb4d08d6fbbdb7120d9960bd83ea49c35baffff4241"} {"level":"info","ts":"2026-07-24T02:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439"} {"level":"info","ts":"2026-07-24T02:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ddfc68320997aeb085f98c983add6308bcd230287198da0e39a6558a6296f278"} {"level":"info","ts":"2026-07-24T02:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/559a98be6c293065b8a7541912a6ee00e07c019dc8f7a717b7464815488122d2"} {"level":"info","ts":"2026-07-24T02:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b620d5bc4c39f1c50790e03798b261409f9affec7741dd50685d15c465160423"} {"level":"info","ts":"2026-07-24T02:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ef8626f5dc513f91ce3741272b2e4f431742d02753f21450fe9a0656483327fb"} {"level":"info","ts":"2026-07-24T02:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7"} {"level":"info","ts":"2026-07-24T02:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4b237b481b92f76eea3f5a6d68967e2b10c9c011f4f5c39df401628a78b6f8fb"} {"level":"info","ts":"2026-07-24T02:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ca081a27daab9f175f355fc80d0b19a93f51f455c82fe61449712be3c2a05928"} {"level":"info","ts":"2026-07-24T02:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a527a005255423217f6206b292ef8ea946c196695297bfc6b44680248dd34dd3"} {"level":"info","ts":"2026-07-24T02:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b5832690479cbdd31c01e96846f87b1c5a209dcbb5d513c059a7013ce5453c8e"} {"level":"info","ts":"2026-07-24T02:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/96daf4fb9b5f7d042aa81dbe7394c5ccf3024be9d6a73412aaaf700581d3353e"} {"level":"info","ts":"2026-07-24T02:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/69a983cbe0fdee8993f347b0025e355a2839922c5c626600fc22ab314a0ba716"} {"level":"info","ts":"2026-07-24T02:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/30df344886bf608848b6221bde80ba46b4a5cb0102a85ea3e4e71eed43b15546"} {"level":"info","ts":"2026-07-24T02:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e9755d5572cc167b7e1442a4b1dc1c9502468db57c2bca1885198cf8dc4cac93"} {"level":"info","ts":"2026-07-24T02:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da"} {"level":"info","ts":"2026-07-24T02:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/abd7c51d98e3c4354a2f4a1ad4bcd8dbab21302669622dd655d66262a1673db3"} {"level":"info","ts":"2026-07-24T02:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c82063d4f1785a6a5f9a342c074337d10ae1ff4d530d014a8dc65fb2a774c9a3"} {"level":"info","ts":"2026-07-24T02:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7034568b30e300a71dbf53b2f369285923cca47e4221a2db7b6e5b9baf6d3fd3"} {"level":"info","ts":"2026-07-24T02:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0"} {"level":"info","ts":"2026-07-24T02:12:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b3576d64aec989a084e35fb7c7c2fc8502d45ef917eabaa21fee248c3797d389"} {"level":"debug","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:13:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:13:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0"} {"level":"debug","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0"} {"level":"debug","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:13:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:13:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:13:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:13:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0"} {"level":"info","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:13:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:13:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0"} {"level":"info","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:13:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:13:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:13:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:13:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0"} {"level":"info","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:13:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:13:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0"} {"level":"info","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:13:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:13:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:13:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:13:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0"} {"level":"info","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:13:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:13:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:13:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:13:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0"} {"level":"info","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:13:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:13:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0"} {"level":"info","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0"} {"level":"debug","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:13:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:13:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:13:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:13:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0"} {"level":"debug","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0"} {"level":"debug","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:13:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:13:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b81307a79377c76117fcd05f0c7594eae75fc90b2c6688335f290ece6e04957b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:13:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:13:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b81307a79377c76117fcd05f0c7594eae75fc90b2c6688335f290ece6e04957b"} {"level":"info","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b81307a79377c76117fcd05f0c7594eae75fc90b2c6688335f290ece6e04957b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:13:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:13:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0"} {"level":"info","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b81307a79377c76117fcd05f0c7594eae75fc90b2c6688335f290ece6e04957b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:13:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:13:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b81307a79377c76117fcd05f0c7594eae75fc90b2c6688335f290ece6e04957b"} {"level":"info","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b81307a79377c76117fcd05f0c7594eae75fc90b2c6688335f290ece6e04957b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:13:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:13:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b81307a79377c76117fcd05f0c7594eae75fc90b2c6688335f290ece6e04957b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0"} {"level":"info","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b81307a79377c76117fcd05f0c7594eae75fc90b2c6688335f290ece6e04957b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:13:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:13:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b81307a79377c76117fcd05f0c7594eae75fc90b2c6688335f290ece6e04957b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"396b83a2d682c141a49126a209ff7fe846248f4e29f6d2ba94fb55f1471eca38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:13:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:13:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0"} {"level":"info","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"396b83a2d682c141a49126a209ff7fe846248f4e29f6d2ba94fb55f1471eca38","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:13:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:13:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b81307a79377c76117fcd05f0c7594eae75fc90b2c6688335f290ece6e04957b"} {"level":"info","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"396b83a2d682c141a49126a209ff7fe846248f4e29f6d2ba94fb55f1471eca38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:13:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:13:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/396b83a2d682c141a49126a209ff7fe846248f4e29f6d2ba94fb55f1471eca38"} {"level":"info","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"396b83a2d682c141a49126a209ff7fe846248f4e29f6d2ba94fb55f1471eca38","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:13:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:13:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0"} {"level":"info","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"396b83a2d682c141a49126a209ff7fe846248f4e29f6d2ba94fb55f1471eca38","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/396b83a2d682c141a49126a209ff7fe846248f4e29f6d2ba94fb55f1471eca38"} {"level":"debug","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"396b83a2d682c141a49126a209ff7fe846248f4e29f6d2ba94fb55f1471eca38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:13:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:13:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["396b83a2d682c141a49126a209ff7fe846248f4e29f6d2ba94fb55f1471eca38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0"} {"level":"info","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"396b83a2d682c141a49126a209ff7fe846248f4e29f6d2ba94fb55f1471eca38","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:13:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:13:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:13:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:13:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da"} {"level":"info","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"396b83a2d682c141a49126a209ff7fe846248f4e29f6d2ba94fb55f1471eca38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:13:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:13:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/396b83a2d682c141a49126a209ff7fe846248f4e29f6d2ba94fb55f1471eca38"} {"level":"info","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"396b83a2d682c141a49126a209ff7fe846248f4e29f6d2ba94fb55f1471eca38","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:13:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:13:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0"} {"level":"info","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"396b83a2d682c141a49126a209ff7fe846248f4e29f6d2ba94fb55f1471eca38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:13:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:13:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["396b83a2d682c141a49126a209ff7fe846248f4e29f6d2ba94fb55f1471eca38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"396b83a2d682c141a49126a209ff7fe846248f4e29f6d2ba94fb55f1471eca38","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:13:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:13:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da"} {"level":"info","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:13:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:13:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/396b83a2d682c141a49126a209ff7fe846248f4e29f6d2ba94fb55f1471eca38"} {"level":"info","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"396b83a2d682c141a49126a209ff7fe846248f4e29f6d2ba94fb55f1471eca38","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:13:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:13:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0"} {"level":"debug","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:13:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:13:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da"} {"level":"info","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0"} {"level":"debug","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:13:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:13:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7"} {"level":"info","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7"} {"level":"debug","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:13:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:13:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:13:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:13:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7"} {"level":"debug","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7"} {"level":"debug","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5114acaf59fb1579ed9c90a30ea521a336051f8eb151f1c35d925a309cea81d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:13:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:13:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5114acaf59fb1579ed9c90a30ea521a336051f8eb151f1c35d925a309cea81d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5114acaf59fb1579ed9c90a30ea521a336051f8eb151f1c35d925a309cea81d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:13:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:13:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5114acaf59fb1579ed9c90a30ea521a336051f8eb151f1c35d925a309cea81d1"} {"level":"info","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5114acaf59fb1579ed9c90a30ea521a336051f8eb151f1c35d925a309cea81d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5114acaf59fb1579ed9c90a30ea521a336051f8eb151f1c35d925a309cea81d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:13:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:13:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5114acaf59fb1579ed9c90a30ea521a336051f8eb151f1c35d925a309cea81d1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5114acaf59fb1579ed9c90a30ea521a336051f8eb151f1c35d925a309cea81d1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5114acaf59fb1579ed9c90a30ea521a336051f8eb151f1c35d925a309cea81d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5114acaf59fb1579ed9c90a30ea521a336051f8eb151f1c35d925a309cea81d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:13:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:13:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5114acaf59fb1579ed9c90a30ea521a336051f8eb151f1c35d925a309cea81d1"} {"level":"info","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5114acaf59fb1579ed9c90a30ea521a336051f8eb151f1c35d925a309cea81d1"} {"level":"info","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7"} {"level":"debug","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55c5fe09fd322046046be6bd54e8a8861379e8d11eeb2fcbe8165ebc4c8a8b5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:13:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:13:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55c5fe09fd322046046be6bd54e8a8861379e8d11eeb2fcbe8165ebc4c8a8b5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5114acaf59fb1579ed9c90a30ea521a336051f8eb151f1c35d925a309cea81d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:13:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:13:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5114acaf59fb1579ed9c90a30ea521a336051f8eb151f1c35d925a309cea81d1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55c5fe09fd322046046be6bd54e8a8861379e8d11eeb2fcbe8165ebc4c8a8b5d"} {"level":"info","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5114acaf59fb1579ed9c90a30ea521a336051f8eb151f1c35d925a309cea81d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55c5fe09fd322046046be6bd54e8a8861379e8d11eeb2fcbe8165ebc4c8a8b5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5114acaf59fb1579ed9c90a30ea521a336051f8eb151f1c35d925a309cea81d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55c5fe09fd322046046be6bd54e8a8861379e8d11eeb2fcbe8165ebc4c8a8b5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55c5fe09fd322046046be6bd54e8a8861379e8d11eeb2fcbe8165ebc4c8a8b5d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55c5fe09fd322046046be6bd54e8a8861379e8d11eeb2fcbe8165ebc4c8a8b5d"} {"level":"debug","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69a983cbe0fdee8993f347b0025e355a2839922c5c626600fc22ab314a0ba716","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:13:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:13:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69a983cbe0fdee8993f347b0025e355a2839922c5c626600fc22ab314a0ba716","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55c5fe09fd322046046be6bd54e8a8861379e8d11eeb2fcbe8165ebc4c8a8b5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:13:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:13:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55c5fe09fd322046046be6bd54e8a8861379e8d11eeb2fcbe8165ebc4c8a8b5d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5114acaf59fb1579ed9c90a30ea521a336051f8eb151f1c35d925a309cea81d1"} {"level":"info","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55c5fe09fd322046046be6bd54e8a8861379e8d11eeb2fcbe8165ebc4c8a8b5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69a983cbe0fdee8993f347b0025e355a2839922c5c626600fc22ab314a0ba716","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:13:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:13:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69a983cbe0fdee8993f347b0025e355a2839922c5c626600fc22ab314a0ba716"} {"level":"info","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69a983cbe0fdee8993f347b0025e355a2839922c5c626600fc22ab314a0ba716","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55c5fe09fd322046046be6bd54e8a8861379e8d11eeb2fcbe8165ebc4c8a8b5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:13:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:13:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55c5fe09fd322046046be6bd54e8a8861379e8d11eeb2fcbe8165ebc4c8a8b5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69a983cbe0fdee8993f347b0025e355a2839922c5c626600fc22ab314a0ba716","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:13:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:13:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69a983cbe0fdee8993f347b0025e355a2839922c5c626600fc22ab314a0ba716"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55c5fe09fd322046046be6bd54e8a8861379e8d11eeb2fcbe8165ebc4c8a8b5d"} {"level":"info","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69a983cbe0fdee8993f347b0025e355a2839922c5c626600fc22ab314a0ba716","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55c5fe09fd322046046be6bd54e8a8861379e8d11eeb2fcbe8165ebc4c8a8b5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:13:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:13:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55c5fe09fd322046046be6bd54e8a8861379e8d11eeb2fcbe8165ebc4c8a8b5d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55c5fe09fd322046046be6bd54e8a8861379e8d11eeb2fcbe8165ebc4c8a8b5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69a983cbe0fdee8993f347b0025e355a2839922c5c626600fc22ab314a0ba716","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:13:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:13:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69a983cbe0fdee8993f347b0025e355a2839922c5c626600fc22ab314a0ba716"} {"level":"info","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69a983cbe0fdee8993f347b0025e355a2839922c5c626600fc22ab314a0ba716","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55c5fe09fd322046046be6bd54e8a8861379e8d11eeb2fcbe8165ebc4c8a8b5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:13:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:13:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55c5fe09fd322046046be6bd54e8a8861379e8d11eeb2fcbe8165ebc4c8a8b5d"} {"level":"info","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55c5fe09fd322046046be6bd54e8a8861379e8d11eeb2fcbe8165ebc4c8a8b5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69a983cbe0fdee8993f347b0025e355a2839922c5c626600fc22ab314a0ba716","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55c5fe09fd322046046be6bd54e8a8861379e8d11eeb2fcbe8165ebc4c8a8b5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:13:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:13:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55c5fe09fd322046046be6bd54e8a8861379e8d11eeb2fcbe8165ebc4c8a8b5d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55c5fe09fd322046046be6bd54e8a8861379e8d11eeb2fcbe8165ebc4c8a8b5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69a983cbe0fdee8993f347b0025e355a2839922c5c626600fc22ab314a0ba716","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55c5fe09fd322046046be6bd54e8a8861379e8d11eeb2fcbe8165ebc4c8a8b5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:13:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:13:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55c5fe09fd322046046be6bd54e8a8861379e8d11eeb2fcbe8165ebc4c8a8b5d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69a983cbe0fdee8993f347b0025e355a2839922c5c626600fc22ab314a0ba716"} {"level":"error","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"55c5fe09fd322046046be6bd54e8a8861379e8d11eeb2fcbe8165ebc4c8a8b5d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"55c5fe09fd322046046be6bd54e8a8861379e8d11eeb2fcbe8165ebc4c8a8b5d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55c5fe09fd322046046be6bd54e8a8861379e8d11eeb2fcbe8165ebc4c8a8b5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:13:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:13:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55c5fe09fd322046046be6bd54e8a8861379e8d11eeb2fcbe8165ebc4c8a8b5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55c5fe09fd322046046be6bd54e8a8861379e8d11eeb2fcbe8165ebc4c8a8b5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:13:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:13:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55c5fe09fd322046046be6bd54e8a8861379e8d11eeb2fcbe8165ebc4c8a8b5d"} {"level":"error","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"55c5fe09fd322046046be6bd54e8a8861379e8d11eeb2fcbe8165ebc4c8a8b5d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"55c5fe09fd322046046be6bd54e8a8861379e8d11eeb2fcbe8165ebc4c8a8b5d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69a983cbe0fdee8993f347b0025e355a2839922c5c626600fc22ab314a0ba716","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:13:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:13:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69a983cbe0fdee8993f347b0025e355a2839922c5c626600fc22ab314a0ba716"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55c5fe09fd322046046be6bd54e8a8861379e8d11eeb2fcbe8165ebc4c8a8b5d"} {"level":"info","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69a983cbe0fdee8993f347b0025e355a2839922c5c626600fc22ab314a0ba716","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55c5fe09fd322046046be6bd54e8a8861379e8d11eeb2fcbe8165ebc4c8a8b5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:13:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:13:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55c5fe09fd322046046be6bd54e8a8861379e8d11eeb2fcbe8165ebc4c8a8b5d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69a983cbe0fdee8993f347b0025e355a2839922c5c626600fc22ab314a0ba716"} {"level":"info","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55c5fe09fd322046046be6bd54e8a8861379e8d11eeb2fcbe8165ebc4c8a8b5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69a983cbe0fdee8993f347b0025e355a2839922c5c626600fc22ab314a0ba716","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55c5fe09fd322046046be6bd54e8a8861379e8d11eeb2fcbe8165ebc4c8a8b5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:13:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:13:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55c5fe09fd322046046be6bd54e8a8861379e8d11eeb2fcbe8165ebc4c8a8b5d"} {"level":"info","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55c5fe09fd322046046be6bd54e8a8861379e8d11eeb2fcbe8165ebc4c8a8b5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55c5fe09fd322046046be6bd54e8a8861379e8d11eeb2fcbe8165ebc4c8a8b5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:13:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:13:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55c5fe09fd322046046be6bd54e8a8861379e8d11eeb2fcbe8165ebc4c8a8b5d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55c5fe09fd322046046be6bd54e8a8861379e8d11eeb2fcbe8165ebc4c8a8b5d"} {"level":"info","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55c5fe09fd322046046be6bd54e8a8861379e8d11eeb2fcbe8165ebc4c8a8b5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d3b6d178c4f3da7728576378a2425a830c3d37b28174e4e8056869a2baf3ef9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:13:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:13:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d3b6d178c4f3da7728576378a2425a830c3d37b28174e4e8056869a2baf3ef9"} {"level":"info","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55c5fe09fd322046046be6bd54e8a8861379e8d11eeb2fcbe8165ebc4c8a8b5d"} {"level":"info","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d3b6d178c4f3da7728576378a2425a830c3d37b28174e4e8056869a2baf3ef9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55c5fe09fd322046046be6bd54e8a8861379e8d11eeb2fcbe8165ebc4c8a8b5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d3b6d178c4f3da7728576378a2425a830c3d37b28174e4e8056869a2baf3ef9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d3b6d178c4f3da7728576378a2425a830c3d37b28174e4e8056869a2baf3ef9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d3b6d178c4f3da7728576378a2425a830c3d37b28174e4e8056869a2baf3ef9"} {"level":"debug","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d3b6d178c4f3da7728576378a2425a830c3d37b28174e4e8056869a2baf3ef9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:13:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:13:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d3b6d178c4f3da7728576378a2425a830c3d37b28174e4e8056869a2baf3ef9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d3b6d178c4f3da7728576378a2425a830c3d37b28174e4e8056869a2baf3ef9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d3b6d178c4f3da7728576378a2425a830c3d37b28174e4e8056869a2baf3ef9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d3b6d178c4f3da7728576378a2425a830c3d37b28174e4e8056869a2baf3ef9"} {"level":"debug","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d759eefd694994227655b49856c508750716da9e77ede1b500e3da1804cde75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:13:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:13:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d759eefd694994227655b49856c508750716da9e77ede1b500e3da1804cde75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0eeda3784a0b62d7fb9073029b9a44d074f98e72d6768bd88dcb545bd742e04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:13:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:13:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d759eefd694994227655b49856c508750716da9e77ede1b500e3da1804cde75"} {"level":"info","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0eeda3784a0b62d7fb9073029b9a44d074f98e72d6768bd88dcb545bd742e04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d759eefd694994227655b49856c508750716da9e77ede1b500e3da1804cde75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:13:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:13:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d759eefd694994227655b49856c508750716da9e77ede1b500e3da1804cde75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0eeda3784a0b62d7fb9073029b9a44d074f98e72d6768bd88dcb545bd742e04"} {"level":"info","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d759eefd694994227655b49856c508750716da9e77ede1b500e3da1804cde75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0eeda3784a0b62d7fb9073029b9a44d074f98e72d6768bd88dcb545bd742e04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:13:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:13:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0eeda3784a0b62d7fb9073029b9a44d074f98e72d6768bd88dcb545bd742e04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d759eefd694994227655b49856c508750716da9e77ede1b500e3da1804cde75"} {"level":"info","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0eeda3784a0b62d7fb9073029b9a44d074f98e72d6768bd88dcb545bd742e04"} {"level":"info","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d759eefd694994227655b49856c508750716da9e77ede1b500e3da1804cde75"} {"level":"info","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0eeda3784a0b62d7fb9073029b9a44d074f98e72d6768bd88dcb545bd742e04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d759eefd694994227655b49856c508750716da9e77ede1b500e3da1804cde75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca081a27daab9f175f355fc80d0b19a93f51f455c82fe61449712be3c2a05928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:13:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:13:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca081a27daab9f175f355fc80d0b19a93f51f455c82fe61449712be3c2a05928"} {"level":"info","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0eeda3784a0b62d7fb9073029b9a44d074f98e72d6768bd88dcb545bd742e04"} {"level":"info","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca081a27daab9f175f355fc80d0b19a93f51f455c82fe61449712be3c2a05928","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0eeda3784a0b62d7fb9073029b9a44d074f98e72d6768bd88dcb545bd742e04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2bf34e94e8fbf121420257611e0d22f40f6b05d4078728bb148030ebfbd1b32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:13:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:13:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2bf34e94e8fbf121420257611e0d22f40f6b05d4078728bb148030ebfbd1b32"} {"level":"info","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca081a27daab9f175f355fc80d0b19a93f51f455c82fe61449712be3c2a05928"} {"level":"info","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2bf34e94e8fbf121420257611e0d22f40f6b05d4078728bb148030ebfbd1b32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca081a27daab9f175f355fc80d0b19a93f51f455c82fe61449712be3c2a05928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:13:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:13:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca081a27daab9f175f355fc80d0b19a93f51f455c82fe61449712be3c2a05928"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab52dfccb6c91b90ebac197b7c029fd3218dd6b6708c5d903ecc65ff590e62a0"} {"level":"info","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2bf34e94e8fbf121420257611e0d22f40f6b05d4078728bb148030ebfbd1b32"} {"level":"info","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca081a27daab9f175f355fc80d0b19a93f51f455c82fe61449712be3c2a05928","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab52dfccb6c91b90ebac197b7c029fd3218dd6b6708c5d903ecc65ff590e62a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:13:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:13:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab52dfccb6c91b90ebac197b7c029fd3218dd6b6708c5d903ecc65ff590e62a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee5087c974874251c02716b5a53d9755681511094dea2bab3c569d6f05174344"} {"level":"info","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2627161768fd39a9fc06be0104e5994919eedb18143b0407b08c1f96edce3f8b"} {"level":"info","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/007f12d3b92c645cd23063ccc7e103139865d14081aced68d77d4ec9f5f8f58a"} {"level":"info","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab52dfccb6c91b90ebac197b7c029fd3218dd6b6708c5d903ecc65ff590e62a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2bf34e94e8fbf121420257611e0d22f40f6b05d4078728bb148030ebfbd1b32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:13:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:13:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a2bf34e94e8fbf121420257611e0d22f40f6b05d4078728bb148030ebfbd1b32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b83cbae08bdbcbbb874b2ede49d32b5ccc3b192d828ac034dd3539ea5255463"} {"level":"info","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca081a27daab9f175f355fc80d0b19a93f51f455c82fe61449712be3c2a05928"} {"level":"info","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439"} {"level":"info","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2bf34e94e8fbf121420257611e0d22f40f6b05d4078728bb148030ebfbd1b32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee5087c974874251c02716b5a53d9755681511094dea2bab3c569d6f05174344","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:13:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:13:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee5087c974874251c02716b5a53d9755681511094dea2bab3c569d6f05174344"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba718a6451a8321192aa9242399774b08cc1af7dcdbfed7b7f23e0dc80a8782c"} {"level":"info","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa21dbe11a5b692925a6a977b080c3f21178d3a731ff772d0584f384285f722b"} {"level":"info","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee5087c974874251c02716b5a53d9755681511094dea2bab3c569d6f05174344","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2627161768fd39a9fc06be0104e5994919eedb18143b0407b08c1f96edce3f8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:13:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:13:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2627161768fd39a9fc06be0104e5994919eedb18143b0407b08c1f96edce3f8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab52dfccb6c91b90ebac197b7c029fd3218dd6b6708c5d903ecc65ff590e62a0"} {"level":"info","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b76ad7fb51d8246bd67746307c2185e09eba8bb7dd6ea53ff3a58151de967ca"} {"level":"info","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2627161768fd39a9fc06be0104e5994919eedb18143b0407b08c1f96edce3f8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"007f12d3b92c645cd23063ccc7e103139865d14081aced68d77d4ec9f5f8f58a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:13:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:13:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["007f12d3b92c645cd23063ccc7e103139865d14081aced68d77d4ec9f5f8f58a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85cf374d945ad05dcc51b429f1597475d0bdace0f5d6a245e87f811aad3fcece"} {"level":"info","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"007f12d3b92c645cd23063ccc7e103139865d14081aced68d77d4ec9f5f8f58a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b83cbae08bdbcbbb874b2ede49d32b5ccc3b192d828ac034dd3539ea5255463","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:13:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:13:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b83cbae08bdbcbbb874b2ede49d32b5ccc3b192d828ac034dd3539ea5255463"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e50a1433a9abe8fbb8e6ae6eec853e2887fb1556e54fed5a3016184f252f181"} {"level":"info","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2bf34e94e8fbf121420257611e0d22f40f6b05d4078728bb148030ebfbd1b32"} {"level":"info","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b83cbae08bdbcbbb874b2ede49d32b5ccc3b192d828ac034dd3539ea5255463","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca081a27daab9f175f355fc80d0b19a93f51f455c82fe61449712be3c2a05928","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:13:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:13:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee5087c974874251c02716b5a53d9755681511094dea2bab3c569d6f05174344"} {"level":"info","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2627161768fd39a9fc06be0104e5994919eedb18143b0407b08c1f96edce3f8b"} {"level":"info","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba718a6451a8321192aa9242399774b08cc1af7dcdbfed7b7f23e0dc80a8782c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:13:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:13:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba718a6451a8321192aa9242399774b08cc1af7dcdbfed7b7f23e0dc80a8782c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/007f12d3b92c645cd23063ccc7e103139865d14081aced68d77d4ec9f5f8f58a"} {"level":"info","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b83cbae08bdbcbbb874b2ede49d32b5ccc3b192d828ac034dd3539ea5255463"} {"level":"info","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba718a6451a8321192aa9242399774b08cc1af7dcdbfed7b7f23e0dc80a8782c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa21dbe11a5b692925a6a977b080c3f21178d3a731ff772d0584f384285f722b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:13:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:13:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa21dbe11a5b692925a6a977b080c3f21178d3a731ff772d0584f384285f722b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439"} {"level":"info","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba718a6451a8321192aa9242399774b08cc1af7dcdbfed7b7f23e0dc80a8782c"} {"level":"info","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa21dbe11a5b692925a6a977b080c3f21178d3a731ff772d0584f384285f722b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab52dfccb6c91b90ebac197b7c029fd3218dd6b6708c5d903ecc65ff590e62a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b76ad7fb51d8246bd67746307c2185e09eba8bb7dd6ea53ff3a58151de967ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:13:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:13:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b76ad7fb51d8246bd67746307c2185e09eba8bb7dd6ea53ff3a58151de967ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa21dbe11a5b692925a6a977b080c3f21178d3a731ff772d0584f384285f722b"} {"level":"info","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b76ad7fb51d8246bd67746307c2185e09eba8bb7dd6ea53ff3a58151de967ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85cf374d945ad05dcc51b429f1597475d0bdace0f5d6a245e87f811aad3fcece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:13:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:13:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85cf374d945ad05dcc51b429f1597475d0bdace0f5d6a245e87f811aad3fcece"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b76ad7fb51d8246bd67746307c2185e09eba8bb7dd6ea53ff3a58151de967ca"} {"level":"info","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85cf374d945ad05dcc51b429f1597475d0bdace0f5d6a245e87f811aad3fcece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e50a1433a9abe8fbb8e6ae6eec853e2887fb1556e54fed5a3016184f252f181","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:13:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:13:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e50a1433a9abe8fbb8e6ae6eec853e2887fb1556e54fed5a3016184f252f181"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85cf374d945ad05dcc51b429f1597475d0bdace0f5d6a245e87f811aad3fcece"} {"level":"info","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e50a1433a9abe8fbb8e6ae6eec853e2887fb1556e54fed5a3016184f252f181","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2bf34e94e8fbf121420257611e0d22f40f6b05d4078728bb148030ebfbd1b32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee5087c974874251c02716b5a53d9755681511094dea2bab3c569d6f05174344","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2627161768fd39a9fc06be0104e5994919eedb18143b0407b08c1f96edce3f8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"007f12d3b92c645cd23063ccc7e103139865d14081aced68d77d4ec9f5f8f58a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b83cbae08bdbcbbb874b2ede49d32b5ccc3b192d828ac034dd3539ea5255463","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba718a6451a8321192aa9242399774b08cc1af7dcdbfed7b7f23e0dc80a8782c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa21dbe11a5b692925a6a977b080c3f21178d3a731ff772d0584f384285f722b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b76ad7fb51d8246bd67746307c2185e09eba8bb7dd6ea53ff3a58151de967ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85cf374d945ad05dcc51b429f1597475d0bdace0f5d6a245e87f811aad3fcece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e50a1433a9abe8fbb8e6ae6eec853e2887fb1556e54fed5a3016184f252f181","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:13:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e50a1433a9abe8fbb8e6ae6eec853e2887fb1556e54fed5a3016184f252f181"} {"level":"info","ts":"2026-07-24T02:13:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ed7076e-15b2-44e6-a464-a8d149ac4d2b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:33858","PortSpecifier":{"PortValue":33858}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3ed7076e-15b2-44e6-a464-a8d149ac4d2b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6bcabd.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T02:13:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ed7076e-15b2-44e6-a464-a8d149ac4d2b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:33858","PortSpecifier":{"PortValue":33858}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784859197,"nanos":973208706},"http":{"id":"3ed7076e-15b2-44e6-a464-a8d149ac4d2b","method":"POST","headers":{":authority":"e2e-shared-a-6bcabd.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T02:13:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3ed7076e-15b2-44e6-a464-a8d149ac4d2b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T02:13:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3ed7076e-15b2-44e6-a464-a8d149ac4d2b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f29f66c2-a19e-4465-a7c7-78c9c558bf70","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=418f119d-8728-4d81-ae00-6c04fed31bc9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/28c99b380518"]}} {"level":"debug","ts":"2026-07-24T02:13:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3ed7076e-15b2-44e6-a464-a8d149ac4d2b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/28c99b380518"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=418f119d-8728-4d81-ae00-6c04fed31bc9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f29f66c2-a19e-4465-a7c7-78c9c558bf70","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"69a983cbe0fdee8993f347b0025e355a2839922c5c626600fc22ab314a0ba716"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.81:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6bcabd.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T02:13:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ed7076e-15b2-44e6-a464-a8d149ac4d2b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:13:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ed7076e-15b2-44e6-a464-a8d149ac4d2b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:13:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ed7076e-15b2-44e6-a464-a8d149ac4d2b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6bcabd/sub-test-model-6bcabd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6bcabd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:13:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3ed7076e-15b2-44e6-a464-a8d149ac4d2b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T02:13:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ed7076e-15b2-44e6-a464-a8d149ac4d2b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T02:13:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ed7076e-15b2-44e6-a464-a8d149ac4d2b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-24T02:13:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ed7076e-15b2-44e6-a464-a8d149ac4d2b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T02:13:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ed7076e-15b2-44e6-a464-a8d149ac4d2b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T02:13:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b8bfa472-fa75-4541-a6d9-04e46b202996","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:57514","PortSpecifier":{"PortValue":57514}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b8bfa472-fa75-4541-a6d9-04e46b202996","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a7fbc1.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T02:13:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b8bfa472-fa75-4541-a6d9-04e46b202996","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:57514","PortSpecifier":{"PortValue":57514}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784859198,"nanos":13512166},"http":{"id":"b8bfa472-fa75-4541-a6d9-04e46b202996","method":"POST","headers":{":authority":"e2e-shared-b-a7fbc1.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T02:13:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b8bfa472-fa75-4541-a6d9-04e46b202996","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T02:13:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b8bfa472-fa75-4541-a6d9-04e46b202996","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f29f66c2-a19e-4465-a7c7-78c9c558bf70","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=418f119d-8728-4d81-ae00-6c04fed31bc9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/28c99b380518"]}} {"level":"debug","ts":"2026-07-24T02:13:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b8bfa472-fa75-4541-a6d9-04e46b202996","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/28c99b380518"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=418f119d-8728-4d81-ae00-6c04fed31bc9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f29f66c2-a19e-4465-a7c7-78c9c558bf70","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a7fbc1.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T02:13:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8bfa472-fa75-4541-a6d9-04e46b202996","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:13:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8bfa472-fa75-4541-a6d9-04e46b202996","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:13:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8bfa472-fa75-4541-a6d9-04e46b202996","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a7fbc1/sub-test-model-a7fbc1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a7fbc1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:13:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b8bfa472-fa75-4541-a6d9-04e46b202996","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T02:13:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b8bfa472-fa75-4541-a6d9-04e46b202996","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T02:13:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b8bfa472-fa75-4541-a6d9-04e46b202996","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T02:13:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b8bfa472-fa75-4541-a6d9-04e46b202996","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T02:13:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b8bfa472-fa75-4541-a6d9-04e46b202996","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T02:13:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"189db918-afdd-470f-8179-de2834e4ff11","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:33872","PortSpecifier":{"PortValue":33872}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"189db918-afdd-470f-8179-de2834e4ff11","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-6bcabd.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T02:13:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"189db918-afdd-470f-8179-de2834e4ff11","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:33872","PortSpecifier":{"PortValue":33872}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784859198,"nanos":51956580},"http":{"id":"189db918-afdd-470f-8179-de2834e4ff11","method":"GET","headers":{":authority":"e2e-shared-a-6bcabd.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T02:13:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"189db918-afdd-470f-8179-de2834e4ff11","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-BFdJQpIL0UWP8oTZ_kwo0eMr7PrBSpdQZEcMPqkgNc6cnLVBRKf2ZtyTREIK"} {"level":"debug","ts":"2026-07-24T02:13:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"189db918-afdd-470f-8179-de2834e4ff11","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6bcabd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-BFdJQpIL0UWP8oTZ_kwo0eMr7PrBSpdQZEcMPqkgNc6cnLVBRKf2ZtyTREIK\"}"} {"level":"debug","ts":"2026-07-24T02:13:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"189db918-afdd-470f-8179-de2834e4ff11","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6bcabd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4a5495a9-8691-4a77-8bbe-a260d0e2fe1e","keyName":"e2e-sub-iso-dea06e","subscription":"e2e-a-only-24d495","tenant":"e2e-shared-a-6bcabd","userId":"4a5495a9-8691-4a77-8bbe-a260d0e2fe1e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T02:13:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"189db918-afdd-470f-8179-de2834e4ff11","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T02:13:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"189db918-afdd-470f-8179-de2834e4ff11","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:13:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"189db918-afdd-470f-8179-de2834e4ff11","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:13:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"189db918-afdd-470f-8179-de2834e4ff11","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6bcabd/sub-test-model-6bcabd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6bcabd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:13:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"189db918-afdd-470f-8179-de2834e4ff11","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-24d495"} {"level":"debug","ts":"2026-07-24T02:13:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"189db918-afdd-470f-8179-de2834e4ff11","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T02:13:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"189db918-afdd-470f-8179-de2834e4ff11","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T02:13:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"189db918-afdd-470f-8179-de2834e4ff11","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-24T02:13:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"189db918-afdd-470f-8179-de2834e4ff11","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T02:13:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"189db918-afdd-470f-8179-de2834e4ff11","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T02:13:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b026a95e-5ffb-495c-b991-4e3577648f56","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:57516","PortSpecifier":{"PortValue":57516}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b026a95e-5ffb-495c-b991-4e3577648f56","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-a7fbc1.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T02:13:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b026a95e-5ffb-495c-b991-4e3577648f56","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:57516","PortSpecifier":{"PortValue":57516}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784859198,"nanos":81502750},"http":{"id":"b026a95e-5ffb-495c-b991-4e3577648f56","method":"GET","headers":{":authority":"e2e-shared-b-a7fbc1.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T02:13:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b026a95e-5ffb-495c-b991-4e3577648f56","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-uSbiD7ngjcE6U4uW_RYy8pdWEPgeuUKsPup7FvzkB4ExtYxPpOCV8EXSyLzB"} {"level":"debug","ts":"2026-07-24T02:13:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b026a95e-5ffb-495c-b991-4e3577648f56","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-a7fbc1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-uSbiD7ngjcE6U4uW_RYy8pdWEPgeuUKsPup7FvzkB4ExtYxPpOCV8EXSyLzB\"}"} {"level":"debug","ts":"2026-07-24T02:13:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b026a95e-5ffb-495c-b991-4e3577648f56","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-a7fbc1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"51e79931-7c0e-45fc-89c2-9d098d72bf8b","keyName":"e2e-sub-iso-078fbf","subscription":"e2e-b-only-24d495","tenant":"e2e-shared-b-a7fbc1","userId":"51e79931-7c0e-45fc-89c2-9d098d72bf8b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T02:13:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b026a95e-5ffb-495c-b991-4e3577648f56","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T02:13:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b026a95e-5ffb-495c-b991-4e3577648f56","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:13:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b026a95e-5ffb-495c-b991-4e3577648f56","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:13:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b026a95e-5ffb-495c-b991-4e3577648f56","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a7fbc1/sub-test-model-a7fbc1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a7fbc1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:13:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b026a95e-5ffb-495c-b991-4e3577648f56","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T02:13:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b026a95e-5ffb-495c-b991-4e3577648f56","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-24T02:13:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b026a95e-5ffb-495c-b991-4e3577648f56","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-24d495"} {"level":"debug","ts":"2026-07-24T02:13:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b026a95e-5ffb-495c-b991-4e3577648f56","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T02:13:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b026a95e-5ffb-495c-b991-4e3577648f56","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T02:13:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b026a95e-5ffb-495c-b991-4e3577648f56","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T02:13:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/55c5fe09fd322046046be6bd54e8a8861379e8d11eeb2fcbe8165ebc4c8a8b5d"} {"level":"info","ts":"2026-07-24T02:13:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1d3b6d178c4f3da7728576378a2425a830c3d37b28174e4e8056869a2baf3ef9"} {"level":"info","ts":"2026-07-24T02:13:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7d759eefd694994227655b49856c508750716da9e77ede1b500e3da1804cde75"} {"level":"info","ts":"2026-07-24T02:13:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fa21dbe11a5b692925a6a977b080c3f21178d3a731ff772d0584f384285f722b"} {"level":"info","ts":"2026-07-24T02:13:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7e50a1433a9abe8fbb8e6ae6eec853e2887fb1556e54fed5a3016184f252f181"} {"level":"info","ts":"2026-07-24T02:13:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5b76ad7fb51d8246bd67746307c2185e09eba8bb7dd6ea53ff3a58151de967ca"} {"level":"info","ts":"2026-07-24T02:13:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439"} {"level":"info","ts":"2026-07-24T02:13:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ba718a6451a8321192aa9242399774b08cc1af7dcdbfed7b7f23e0dc80a8782c"} {"level":"info","ts":"2026-07-24T02:13:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7"} {"level":"info","ts":"2026-07-24T02:13:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b81307a79377c76117fcd05f0c7594eae75fc90b2c6688335f290ece6e04957b"} {"level":"info","ts":"2026-07-24T02:13:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da"} {"level":"info","ts":"2026-07-24T02:13:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/85cf374d945ad05dcc51b429f1597475d0bdace0f5d6a245e87f811aad3fcece"} {"level":"debug","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba718a6451a8321192aa9242399774b08cc1af7dcdbfed7b7f23e0dc80a8782c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba718a6451a8321192aa9242399774b08cc1af7dcdbfed7b7f23e0dc80a8782c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba718a6451a8321192aa9242399774b08cc1af7dcdbfed7b7f23e0dc80a8782c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba718a6451a8321192aa9242399774b08cc1af7dcdbfed7b7f23e0dc80a8782c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba718a6451a8321192aa9242399774b08cc1af7dcdbfed7b7f23e0dc80a8782c"} {"level":"debug","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba718a6451a8321192aa9242399774b08cc1af7dcdbfed7b7f23e0dc80a8782c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba718a6451a8321192aa9242399774b08cc1af7dcdbfed7b7f23e0dc80a8782c"} {"level":"debug","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba718a6451a8321192aa9242399774b08cc1af7dcdbfed7b7f23e0dc80a8782c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba718a6451a8321192aa9242399774b08cc1af7dcdbfed7b7f23e0dc80a8782c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba718a6451a8321192aa9242399774b08cc1af7dcdbfed7b7f23e0dc80a8782c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba718a6451a8321192aa9242399774b08cc1af7dcdbfed7b7f23e0dc80a8782c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba718a6451a8321192aa9242399774b08cc1af7dcdbfed7b7f23e0dc80a8782c"} {"level":"debug","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa21dbe11a5b692925a6a977b080c3f21178d3a731ff772d0584f384285f722b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa21dbe11a5b692925a6a977b080c3f21178d3a731ff772d0584f384285f722b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa21dbe11a5b692925a6a977b080c3f21178d3a731ff772d0584f384285f722b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa21dbe11a5b692925a6a977b080c3f21178d3a731ff772d0584f384285f722b"} {"level":"info","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa21dbe11a5b692925a6a977b080c3f21178d3a731ff772d0584f384285f722b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa21dbe11a5b692925a6a977b080c3f21178d3a731ff772d0584f384285f722b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fa21dbe11a5b692925a6a977b080c3f21178d3a731ff772d0584f384285f722b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fa21dbe11a5b692925a6a977b080c3f21178d3a731ff772d0584f384285f722b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa21dbe11a5b692925a6a977b080c3f21178d3a731ff772d0584f384285f722b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa21dbe11a5b692925a6a977b080c3f21178d3a731ff772d0584f384285f722b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa21dbe11a5b692925a6a977b080c3f21178d3a731ff772d0584f384285f722b"} {"level":"info","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa21dbe11a5b692925a6a977b080c3f21178d3a731ff772d0584f384285f722b"} {"level":"debug","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b81307a79377c76117fcd05f0c7594eae75fc90b2c6688335f290ece6e04957b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b81307a79377c76117fcd05f0c7594eae75fc90b2c6688335f290ece6e04957b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b81307a79377c76117fcd05f0c7594eae75fc90b2c6688335f290ece6e04957b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa21dbe11a5b692925a6a977b080c3f21178d3a731ff772d0584f384285f722b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa21dbe11a5b692925a6a977b080c3f21178d3a731ff772d0584f384285f722b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b81307a79377c76117fcd05f0c7594eae75fc90b2c6688335f290ece6e04957b"} {"level":"info","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa21dbe11a5b692925a6a977b080c3f21178d3a731ff772d0584f384285f722b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b81307a79377c76117fcd05f0c7594eae75fc90b2c6688335f290ece6e04957b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa21dbe11a5b692925a6a977b080c3f21178d3a731ff772d0584f384285f722b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b81307a79377c76117fcd05f0c7594eae75fc90b2c6688335f290ece6e04957b"} {"level":"debug","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b81307a79377c76117fcd05f0c7594eae75fc90b2c6688335f290ece6e04957b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b81307a79377c76117fcd05f0c7594eae75fc90b2c6688335f290ece6e04957b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa21dbe11a5b692925a6a977b080c3f21178d3a731ff772d0584f384285f722b"} {"level":"info","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b81307a79377c76117fcd05f0c7594eae75fc90b2c6688335f290ece6e04957b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b81307a79377c76117fcd05f0c7594eae75fc90b2c6688335f290ece6e04957b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b81307a79377c76117fcd05f0c7594eae75fc90b2c6688335f290ece6e04957b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b81307a79377c76117fcd05f0c7594eae75fc90b2c6688335f290ece6e04957b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b81307a79377c76117fcd05f0c7594eae75fc90b2c6688335f290ece6e04957b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b81307a79377c76117fcd05f0c7594eae75fc90b2c6688335f290ece6e04957b"} {"level":"debug","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d759eefd694994227655b49856c508750716da9e77ede1b500e3da1804cde75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b81307a79377c76117fcd05f0c7594eae75fc90b2c6688335f290ece6e04957b"} {"level":"info","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d759eefd694994227655b49856c508750716da9e77ede1b500e3da1804cde75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b81307a79377c76117fcd05f0c7594eae75fc90b2c6688335f290ece6e04957b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b81307a79377c76117fcd05f0c7594eae75fc90b2c6688335f290ece6e04957b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b81307a79377c76117fcd05f0c7594eae75fc90b2c6688335f290ece6e04957b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d759eefd694994227655b49856c508750716da9e77ede1b500e3da1804cde75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d759eefd694994227655b49856c508750716da9e77ede1b500e3da1804cde75"} {"level":"info","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d759eefd694994227655b49856c508750716da9e77ede1b500e3da1804cde75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b81307a79377c76117fcd05f0c7594eae75fc90b2c6688335f290ece6e04957b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b81307a79377c76117fcd05f0c7594eae75fc90b2c6688335f290ece6e04957b"} {"level":"info","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b81307a79377c76117fcd05f0c7594eae75fc90b2c6688335f290ece6e04957b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d759eefd694994227655b49856c508750716da9e77ede1b500e3da1804cde75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b81307a79377c76117fcd05f0c7594eae75fc90b2c6688335f290ece6e04957b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b81307a79377c76117fcd05f0c7594eae75fc90b2c6688335f290ece6e04957b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b81307a79377c76117fcd05f0c7594eae75fc90b2c6688335f290ece6e04957b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b81307a79377c76117fcd05f0c7594eae75fc90b2c6688335f290ece6e04957b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b81307a79377c76117fcd05f0c7594eae75fc90b2c6688335f290ece6e04957b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d759eefd694994227655b49856c508750716da9e77ede1b500e3da1804cde75"} {"level":"error","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b81307a79377c76117fcd05f0c7594eae75fc90b2c6688335f290ece6e04957b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b81307a79377c76117fcd05f0c7594eae75fc90b2c6688335f290ece6e04957b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d759eefd694994227655b49856c508750716da9e77ede1b500e3da1804cde75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d759eefd694994227655b49856c508750716da9e77ede1b500e3da1804cde75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d759eefd694994227655b49856c508750716da9e77ede1b500e3da1804cde75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b81307a79377c76117fcd05f0c7594eae75fc90b2c6688335f290ece6e04957b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b81307a79377c76117fcd05f0c7594eae75fc90b2c6688335f290ece6e04957b"} {"level":"info","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b81307a79377c76117fcd05f0c7594eae75fc90b2c6688335f290ece6e04957b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d759eefd694994227655b49856c508750716da9e77ede1b500e3da1804cde75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d759eefd694994227655b49856c508750716da9e77ede1b500e3da1804cde75"} {"level":"info","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d759eefd694994227655b49856c508750716da9e77ede1b500e3da1804cde75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439"} {"level":"info","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b81307a79377c76117fcd05f0c7594eae75fc90b2c6688335f290ece6e04957b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d759eefd694994227655b49856c508750716da9e77ede1b500e3da1804cde75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d759eefd694994227655b49856c508750716da9e77ede1b500e3da1804cde75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d759eefd694994227655b49856c508750716da9e77ede1b500e3da1804cde75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b81307a79377c76117fcd05f0c7594eae75fc90b2c6688335f290ece6e04957b"} {"level":"info","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d759eefd694994227655b49856c508750716da9e77ede1b500e3da1804cde75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d759eefd694994227655b49856c508750716da9e77ede1b500e3da1804cde75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b81307a79377c76117fcd05f0c7594eae75fc90b2c6688335f290ece6e04957b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b81307a79377c76117fcd05f0c7594eae75fc90b2c6688335f290ece6e04957b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d759eefd694994227655b49856c508750716da9e77ede1b500e3da1804cde75"} {"level":"info","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b81307a79377c76117fcd05f0c7594eae75fc90b2c6688335f290ece6e04957b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439"} {"level":"info","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d759eefd694994227655b49856c508750716da9e77ede1b500e3da1804cde75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b81307a79377c76117fcd05f0c7594eae75fc90b2c6688335f290ece6e04957b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d3b6d178c4f3da7728576378a2425a830c3d37b28174e4e8056869a2baf3ef9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d759eefd694994227655b49856c508750716da9e77ede1b500e3da1804cde75"} {"level":"info","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d3b6d178c4f3da7728576378a2425a830c3d37b28174e4e8056869a2baf3ef9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d759eefd694994227655b49856c508750716da9e77ede1b500e3da1804cde75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d759eefd694994227655b49856c508750716da9e77ede1b500e3da1804cde75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b81307a79377c76117fcd05f0c7594eae75fc90b2c6688335f290ece6e04957b"} {"level":"info","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d759eefd694994227655b49856c508750716da9e77ede1b500e3da1804cde75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d3b6d178c4f3da7728576378a2425a830c3d37b28174e4e8056869a2baf3ef9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d3b6d178c4f3da7728576378a2425a830c3d37b28174e4e8056869a2baf3ef9"} {"level":"info","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d3b6d178c4f3da7728576378a2425a830c3d37b28174e4e8056869a2baf3ef9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d759eefd694994227655b49856c508750716da9e77ede1b500e3da1804cde75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d3b6d178c4f3da7728576378a2425a830c3d37b28174e4e8056869a2baf3ef9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d3b6d178c4f3da7728576378a2425a830c3d37b28174e4e8056869a2baf3ef9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439"} {"level":"info","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d3b6d178c4f3da7728576378a2425a830c3d37b28174e4e8056869a2baf3ef9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d759eefd694994227655b49856c508750716da9e77ede1b500e3da1804cde75"} {"level":"info","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d3b6d178c4f3da7728576378a2425a830c3d37b28174e4e8056869a2baf3ef9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d3b6d178c4f3da7728576378a2425a830c3d37b28174e4e8056869a2baf3ef9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d3b6d178c4f3da7728576378a2425a830c3d37b28174e4e8056869a2baf3ef9"} {"level":"info","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d3b6d178c4f3da7728576378a2425a830c3d37b28174e4e8056869a2baf3ef9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d3b6d178c4f3da7728576378a2425a830c3d37b28174e4e8056869a2baf3ef9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439"} {"level":"info","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d3b6d178c4f3da7728576378a2425a830c3d37b28174e4e8056869a2baf3ef9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e50a1433a9abe8fbb8e6ae6eec853e2887fb1556e54fed5a3016184f252f181","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e50a1433a9abe8fbb8e6ae6eec853e2887fb1556e54fed5a3016184f252f181","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7"} {"level":"info","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d3b6d178c4f3da7728576378a2425a830c3d37b28174e4e8056869a2baf3ef9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d3b6d178c4f3da7728576378a2425a830c3d37b28174e4e8056869a2baf3ef9"} {"level":"info","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d3b6d178c4f3da7728576378a2425a830c3d37b28174e4e8056869a2baf3ef9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e50a1433a9abe8fbb8e6ae6eec853e2887fb1556e54fed5a3016184f252f181","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e50a1433a9abe8fbb8e6ae6eec853e2887fb1556e54fed5a3016184f252f181","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e50a1433a9abe8fbb8e6ae6eec853e2887fb1556e54fed5a3016184f252f181"} {"level":"info","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d3b6d178c4f3da7728576378a2425a830c3d37b28174e4e8056869a2baf3ef9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d3b6d178c4f3da7728576378a2425a830c3d37b28174e4e8056869a2baf3ef9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d3b6d178c4f3da7728576378a2425a830c3d37b28174e4e8056869a2baf3ef9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e50a1433a9abe8fbb8e6ae6eec853e2887fb1556e54fed5a3016184f252f181","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:13:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e50a1433a9abe8fbb8e6ae6eec853e2887fb1556e54fed5a3016184f252f181"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7"} {"level":"info","ts":"2026-07-24T02:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e50a1433a9abe8fbb8e6ae6eec853e2887fb1556e54fed5a3016184f252f181","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55c5fe09fd322046046be6bd54e8a8861379e8d11eeb2fcbe8165ebc4c8a8b5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:13:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:13:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55c5fe09fd322046046be6bd54e8a8861379e8d11eeb2fcbe8165ebc4c8a8b5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d3b6d178c4f3da7728576378a2425a830c3d37b28174e4e8056869a2baf3ef9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:13:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:13:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d3b6d178c4f3da7728576378a2425a830c3d37b28174e4e8056869a2baf3ef9"} {"level":"info","ts":"2026-07-24T02:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d3b6d178c4f3da7728576378a2425a830c3d37b28174e4e8056869a2baf3ef9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e50a1433a9abe8fbb8e6ae6eec853e2887fb1556e54fed5a3016184f252f181","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55c5fe09fd322046046be6bd54e8a8861379e8d11eeb2fcbe8165ebc4c8a8b5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:13:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:13:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55c5fe09fd322046046be6bd54e8a8861379e8d11eeb2fcbe8165ebc4c8a8b5d"} {"level":"info","ts":"2026-07-24T02:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55c5fe09fd322046046be6bd54e8a8861379e8d11eeb2fcbe8165ebc4c8a8b5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d3b6d178c4f3da7728576378a2425a830c3d37b28174e4e8056869a2baf3ef9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:13:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:13:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d3b6d178c4f3da7728576378a2425a830c3d37b28174e4e8056869a2baf3ef9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d3b6d178c4f3da7728576378a2425a830c3d37b28174e4e8056869a2baf3ef9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55c5fe09fd322046046be6bd54e8a8861379e8d11eeb2fcbe8165ebc4c8a8b5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:13:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:13:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55c5fe09fd322046046be6bd54e8a8861379e8d11eeb2fcbe8165ebc4c8a8b5d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e50a1433a9abe8fbb8e6ae6eec853e2887fb1556e54fed5a3016184f252f181"} {"level":"info","ts":"2026-07-24T02:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55c5fe09fd322046046be6bd54e8a8861379e8d11eeb2fcbe8165ebc4c8a8b5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b76ad7fb51d8246bd67746307c2185e09eba8bb7dd6ea53ff3a58151de967ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:13:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:13:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7"} {"level":"info","ts":"2026-07-24T02:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b76ad7fb51d8246bd67746307c2185e09eba8bb7dd6ea53ff3a58151de967ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d3b6d178c4f3da7728576378a2425a830c3d37b28174e4e8056869a2baf3ef9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:13:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:13:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d3b6d178c4f3da7728576378a2425a830c3d37b28174e4e8056869a2baf3ef9"} {"level":"info","ts":"2026-07-24T02:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55c5fe09fd322046046be6bd54e8a8861379e8d11eeb2fcbe8165ebc4c8a8b5d"} {"level":"info","ts":"2026-07-24T02:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b76ad7fb51d8246bd67746307c2185e09eba8bb7dd6ea53ff3a58151de967ca"} {"level":"info","ts":"2026-07-24T02:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d3b6d178c4f3da7728576378a2425a830c3d37b28174e4e8056869a2baf3ef9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55c5fe09fd322046046be6bd54e8a8861379e8d11eeb2fcbe8165ebc4c8a8b5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b76ad7fb51d8246bd67746307c2185e09eba8bb7dd6ea53ff3a58151de967ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:13:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:13:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b76ad7fb51d8246bd67746307c2185e09eba8bb7dd6ea53ff3a58151de967ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85cf374d945ad05dcc51b429f1597475d0bdace0f5d6a245e87f811aad3fcece"} {"level":"info","ts":"2026-07-24T02:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d3b6d178c4f3da7728576378a2425a830c3d37b28174e4e8056869a2baf3ef9"} {"level":"info","ts":"2026-07-24T02:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b76ad7fb51d8246bd67746307c2185e09eba8bb7dd6ea53ff3a58151de967ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85cf374d945ad05dcc51b429f1597475d0bdace0f5d6a245e87f811aad3fcece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:13:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:13:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85cf374d945ad05dcc51b429f1597475d0bdace0f5d6a245e87f811aad3fcece"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b76ad7fb51d8246bd67746307c2185e09eba8bb7dd6ea53ff3a58151de967ca"} {"level":"info","ts":"2026-07-24T02:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85cf374d945ad05dcc51b429f1597475d0bdace0f5d6a245e87f811aad3fcece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d3b6d178c4f3da7728576378a2425a830c3d37b28174e4e8056869a2baf3ef9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:13:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:13:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d3b6d178c4f3da7728576378a2425a830c3d37b28174e4e8056869a2baf3ef9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da"} {"level":"info","ts":"2026-07-24T02:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85cf374d945ad05dcc51b429f1597475d0bdace0f5d6a245e87f811aad3fcece"} {"level":"info","ts":"2026-07-24T02:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d3b6d178c4f3da7728576378a2425a830c3d37b28174e4e8056869a2baf3ef9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b76ad7fb51d8246bd67746307c2185e09eba8bb7dd6ea53ff3a58151de967ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:13:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:13:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d3b6d178c4f3da7728576378a2425a830c3d37b28174e4e8056869a2baf3ef9"} {"level":"info","ts":"2026-07-24T02:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85cf374d945ad05dcc51b429f1597475d0bdace0f5d6a245e87f811aad3fcece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d3b6d178c4f3da7728576378a2425a830c3d37b28174e4e8056869a2baf3ef9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:13:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:13:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da"} {"level":"info","ts":"2026-07-24T02:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da"} {"level":"debug","ts":"2026-07-24T02:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:13:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:13:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:13:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:13:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da"} {"level":"info","ts":"2026-07-24T02:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da"} {"level":"debug","ts":"2026-07-24T02:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:13:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:13:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da"} {"level":"info","ts":"2026-07-24T02:13:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d27ee70-f913-455e-8ffa-0b1d6be9cccd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:60070","PortSpecifier":{"PortValue":60070}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8d27ee70-f913-455e-8ffa-0b1d6be9cccd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6bcabd.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T02:13:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d27ee70-f913-455e-8ffa-0b1d6be9cccd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:60070","PortSpecifier":{"PortValue":60070}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784859216,"nanos":925537514},"http":{"id":"8d27ee70-f913-455e-8ffa-0b1d6be9cccd","method":"POST","headers":{":authority":"e2e-shared-a-6bcabd.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T02:13:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8d27ee70-f913-455e-8ffa-0b1d6be9cccd","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T02:13:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8d27ee70-f913-455e-8ffa-0b1d6be9cccd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f29f66c2-a19e-4465-a7c7-78c9c558bf70","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=418f119d-8728-4d81-ae00-6c04fed31bc9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/28c99b380518"]}} {"level":"debug","ts":"2026-07-24T02:13:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8d27ee70-f913-455e-8ffa-0b1d6be9cccd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/28c99b380518"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=418f119d-8728-4d81-ae00-6c04fed31bc9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f29f66c2-a19e-4465-a7c7-78c9c558bf70","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"69a983cbe0fdee8993f347b0025e355a2839922c5c626600fc22ab314a0ba716"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.81:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6bcabd.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T02:13:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d27ee70-f913-455e-8ffa-0b1d6be9cccd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:13:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d27ee70-f913-455e-8ffa-0b1d6be9cccd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:13:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d27ee70-f913-455e-8ffa-0b1d6be9cccd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6bcabd/sub-test-model-6bcabd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6bcabd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:13:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8d27ee70-f913-455e-8ffa-0b1d6be9cccd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T02:13:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d27ee70-f913-455e-8ffa-0b1d6be9cccd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T02:13:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d27ee70-f913-455e-8ffa-0b1d6be9cccd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-24T02:13:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d27ee70-f913-455e-8ffa-0b1d6be9cccd","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T02:13:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d27ee70-f913-455e-8ffa-0b1d6be9cccd","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T02:13:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9e8c12bd-0a48-494e-a803-cdf156323cd4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:51516","PortSpecifier":{"PortValue":51516}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9e8c12bd-0a48-494e-a803-cdf156323cd4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a7fbc1.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T02:13:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9e8c12bd-0a48-494e-a803-cdf156323cd4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:51516","PortSpecifier":{"PortValue":51516}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784859216,"nanos":963372909},"http":{"id":"9e8c12bd-0a48-494e-a803-cdf156323cd4","method":"POST","headers":{":authority":"e2e-shared-b-a7fbc1.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T02:13:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9e8c12bd-0a48-494e-a803-cdf156323cd4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T02:13:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9e8c12bd-0a48-494e-a803-cdf156323cd4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f29f66c2-a19e-4465-a7c7-78c9c558bf70","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=418f119d-8728-4d81-ae00-6c04fed31bc9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/28c99b380518"]}} {"level":"debug","ts":"2026-07-24T02:13:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9e8c12bd-0a48-494e-a803-cdf156323cd4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/28c99b380518"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=418f119d-8728-4d81-ae00-6c04fed31bc9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f29f66c2-a19e-4465-a7c7-78c9c558bf70","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a7fbc1.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T02:13:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e8c12bd-0a48-494e-a803-cdf156323cd4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:13:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e8c12bd-0a48-494e-a803-cdf156323cd4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:13:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e8c12bd-0a48-494e-a803-cdf156323cd4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a7fbc1/sub-test-model-a7fbc1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a7fbc1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:13:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9e8c12bd-0a48-494e-a803-cdf156323cd4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T02:13:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e8c12bd-0a48-494e-a803-cdf156323cd4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T02:13:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e8c12bd-0a48-494e-a803-cdf156323cd4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T02:13:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9e8c12bd-0a48-494e-a803-cdf156323cd4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T02:13:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9e8c12bd-0a48-494e-a803-cdf156323cd4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T02:13:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"63bf3327-e479-4cb7-bf5a-120dd2c9e9fc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:60086","PortSpecifier":{"PortValue":60086}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"63bf3327-e479-4cb7-bf5a-120dd2c9e9fc","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-6bcabd.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T02:13:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"63bf3327-e479-4cb7-bf5a-120dd2c9e9fc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:60086","PortSpecifier":{"PortValue":60086}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784859217,"nanos":1614993},"http":{"id":"63bf3327-e479-4cb7-bf5a-120dd2c9e9fc","method":"POST","headers":{":authority":"e2e-shared-a-6bcabd.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T02:13:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"63bf3327-e479-4cb7-bf5a-120dd2c9e9fc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-qg6jY6i8x1tOkN1q_I250Fx6awbyWziyyFYtZcthw2o3e9MvmaIWyhtHFeFV"} {"level":"debug","ts":"2026-07-24T02:13:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"63bf3327-e479-4cb7-bf5a-120dd2c9e9fc","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6bcabd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-qg6jY6i8x1tOkN1q_I250Fx6awbyWziyyFYtZcthw2o3e9MvmaIWyhtHFeFV\"}"} {"level":"debug","ts":"2026-07-24T02:13:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"63bf3327-e479-4cb7-bf5a-120dd2c9e9fc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6bcabd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"76398921-b61c-4adc-96d6-fc4d813a104f","keyName":"e2e-sub-iso-82ae07","subscription":"e2e-shared-sub-1c0b91","tenant":"e2e-shared-a-6bcabd","userId":"76398921-b61c-4adc-96d6-fc4d813a104f","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T02:13:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"63bf3327-e479-4cb7-bf5a-120dd2c9e9fc","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T02:13:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"63bf3327-e479-4cb7-bf5a-120dd2c9e9fc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:13:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"63bf3327-e479-4cb7-bf5a-120dd2c9e9fc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:13:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"63bf3327-e479-4cb7-bf5a-120dd2c9e9fc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6bcabd/sub-test-model-6bcabd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6bcabd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:13:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"63bf3327-e479-4cb7-bf5a-120dd2c9e9fc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T02:13:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"63bf3327-e479-4cb7-bf5a-120dd2c9e9fc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T02:13:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"63bf3327-e479-4cb7-bf5a-120dd2c9e9fc","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-1c0b91"} {"level":"debug","ts":"2026-07-24T02:13:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"63bf3327-e479-4cb7-bf5a-120dd2c9e9fc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-24T02:13:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"63bf3327-e479-4cb7-bf5a-120dd2c9e9fc","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T02:13:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"63bf3327-e479-4cb7-bf5a-120dd2c9e9fc","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T02:13:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"95d528cc-ef89-4024-8c63-de8d9117eae1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:51522","PortSpecifier":{"PortValue":51522}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"95d528cc-ef89-4024-8c63-de8d9117eae1","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-a7fbc1.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T02:13:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"95d528cc-ef89-4024-8c63-de8d9117eae1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:51522","PortSpecifier":{"PortValue":51522}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784859217,"nanos":32496560},"http":{"id":"95d528cc-ef89-4024-8c63-de8d9117eae1","method":"POST","headers":{":authority":"e2e-shared-b-a7fbc1.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T02:13:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"95d528cc-ef89-4024-8c63-de8d9117eae1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Lzu3vEEPtNBMn7S5_BHCYVa6zJgK4DdjALLbgt94pIGXvIktwxxNumdnqrpC"} {"level":"debug","ts":"2026-07-24T02:13:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"95d528cc-ef89-4024-8c63-de8d9117eae1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-a7fbc1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Lzu3vEEPtNBMn7S5_BHCYVa6zJgK4DdjALLbgt94pIGXvIktwxxNumdnqrpC\"}"} {"level":"debug","ts":"2026-07-24T02:13:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"95d528cc-ef89-4024-8c63-de8d9117eae1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-a7fbc1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0c62d52c-e90a-4e5c-b381-20a9702388a1","keyName":"e2e-sub-iso-825d28","subscription":"e2e-shared-sub-1c0b91","tenant":"e2e-shared-b-a7fbc1","userId":"0c62d52c-e90a-4e5c-b381-20a9702388a1","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T02:13:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"95d528cc-ef89-4024-8c63-de8d9117eae1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T02:13:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95d528cc-ef89-4024-8c63-de8d9117eae1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:13:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95d528cc-ef89-4024-8c63-de8d9117eae1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:13:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95d528cc-ef89-4024-8c63-de8d9117eae1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a7fbc1/sub-test-model-a7fbc1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a7fbc1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:13:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"95d528cc-ef89-4024-8c63-de8d9117eae1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-24T02:13:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"95d528cc-ef89-4024-8c63-de8d9117eae1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T02:13:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"95d528cc-ef89-4024-8c63-de8d9117eae1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-1c0b91"} {"level":"debug","ts":"2026-07-24T02:13:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"95d528cc-ef89-4024-8c63-de8d9117eae1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-24T02:13:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"95d528cc-ef89-4024-8c63-de8d9117eae1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T02:13:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"95d528cc-ef89-4024-8c63-de8d9117eae1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T02:13:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2627161768fd39a9fc06be0104e5994919eedb18143b0407b08c1f96edce3f8b"} {"level":"info","ts":"2026-07-24T02:13:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1d3b6d178c4f3da7728576378a2425a830c3d37b28174e4e8056869a2baf3ef9"} {"level":"info","ts":"2026-07-24T02:13:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/007f12d3b92c645cd23063ccc7e103139865d14081aced68d77d4ec9f5f8f58a"} {"level":"info","ts":"2026-07-24T02:13:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5b76ad7fb51d8246bd67746307c2185e09eba8bb7dd6ea53ff3a58151de967ca"} {"level":"info","ts":"2026-07-24T02:13:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7e50a1433a9abe8fbb8e6ae6eec853e2887fb1556e54fed5a3016184f252f181"} {"level":"info","ts":"2026-07-24T02:13:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0"} {"level":"info","ts":"2026-07-24T02:13:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7d759eefd694994227655b49856c508750716da9e77ede1b500e3da1804cde75"} {"level":"info","ts":"2026-07-24T02:13:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b83cbae08bdbcbbb874b2ede49d32b5ccc3b192d828ac034dd3539ea5255463"} {"level":"info","ts":"2026-07-24T02:13:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fa21dbe11a5b692925a6a977b080c3f21178d3a731ff772d0584f384285f722b"} {"level":"info","ts":"2026-07-24T02:13:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a2bf34e94e8fbf121420257611e0d22f40f6b05d4078728bb148030ebfbd1b32"} {"level":"info","ts":"2026-07-24T02:13:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b81307a79377c76117fcd05f0c7594eae75fc90b2c6688335f290ece6e04957b"} {"level":"info","ts":"2026-07-24T02:13:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/85cf374d945ad05dcc51b429f1597475d0bdace0f5d6a245e87f811aad3fcece"} {"level":"info","ts":"2026-07-24T02:13:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/69a983cbe0fdee8993f347b0025e355a2839922c5c626600fc22ab314a0ba716"} {"level":"info","ts":"2026-07-24T02:13:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439"} {"level":"info","ts":"2026-07-24T02:13:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ba718a6451a8321192aa9242399774b08cc1af7dcdbfed7b7f23e0dc80a8782c"} {"level":"info","ts":"2026-07-24T02:13:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee5087c974874251c02716b5a53d9755681511094dea2bab3c569d6f05174344"} {"level":"info","ts":"2026-07-24T02:13:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/55c5fe09fd322046046be6bd54e8a8861379e8d11eeb2fcbe8165ebc4c8a8b5d"} {"level":"info","ts":"2026-07-24T02:13:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/396b83a2d682c141a49126a209ff7fe846248f4e29f6d2ba94fb55f1471eca38"} {"level":"info","ts":"2026-07-24T02:13:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c0eeda3784a0b62d7fb9073029b9a44d074f98e72d6768bd88dcb545bd742e04"} {"level":"info","ts":"2026-07-24T02:13:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da"} {"level":"info","ts":"2026-07-24T02:13:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ca081a27daab9f175f355fc80d0b19a93f51f455c82fe61449712be3c2a05928"} {"level":"info","ts":"2026-07-24T02:13:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5114acaf59fb1579ed9c90a30ea521a336051f8eb151f1c35d925a309cea81d1"} {"level":"info","ts":"2026-07-24T02:13:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7"} {"level":"info","ts":"2026-07-24T02:13:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ab52dfccb6c91b90ebac197b7c029fd3218dd6b6708c5d903ecc65ff590e62a0"} {"level":"debug","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"266100e6de0039088577080c6ab8a74fee7ace20e7ad479eeef5551f36b5c8de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:14:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:14:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"266100e6de0039088577080c6ab8a74fee7ace20e7ad479eeef5551f36b5c8de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"266100e6de0039088577080c6ab8a74fee7ace20e7ad479eeef5551f36b5c8de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"266100e6de0039088577080c6ab8a74fee7ace20e7ad479eeef5551f36b5c8de","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/266100e6de0039088577080c6ab8a74fee7ace20e7ad479eeef5551f36b5c8de"} {"level":"debug","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"266100e6de0039088577080c6ab8a74fee7ace20e7ad479eeef5551f36b5c8de","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/266100e6de0039088577080c6ab8a74fee7ace20e7ad479eeef5551f36b5c8de"} {"level":"debug","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"266100e6de0039088577080c6ab8a74fee7ace20e7ad479eeef5551f36b5c8de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:14:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:14:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["266100e6de0039088577080c6ab8a74fee7ace20e7ad479eeef5551f36b5c8de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"266100e6de0039088577080c6ab8a74fee7ace20e7ad479eeef5551f36b5c8de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"266100e6de0039088577080c6ab8a74fee7ace20e7ad479eeef5551f36b5c8de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:14:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:14:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"266100e6de0039088577080c6ab8a74fee7ace20e7ad479eeef5551f36b5c8de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d479c81eaeec15eaa672a83964a8bc9092b0c700fbfe3518486c1d3f6722b989","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:14:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:14:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/266100e6de0039088577080c6ab8a74fee7ace20e7ad479eeef5551f36b5c8de"} {"level":"info","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d479c81eaeec15eaa672a83964a8bc9092b0c700fbfe3518486c1d3f6722b989","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"266100e6de0039088577080c6ab8a74fee7ace20e7ad479eeef5551f36b5c8de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:14:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:14:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["266100e6de0039088577080c6ab8a74fee7ace20e7ad479eeef5551f36b5c8de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"266100e6de0039088577080c6ab8a74fee7ace20e7ad479eeef5551f36b5c8de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d479c81eaeec15eaa672a83964a8bc9092b0c700fbfe3518486c1d3f6722b989","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:14:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:14:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d479c81eaeec15eaa672a83964a8bc9092b0c700fbfe3518486c1d3f6722b989"} {"level":"info","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d479c81eaeec15eaa672a83964a8bc9092b0c700fbfe3518486c1d3f6722b989","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"266100e6de0039088577080c6ab8a74fee7ace20e7ad479eeef5551f36b5c8de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:14:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:14:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/266100e6de0039088577080c6ab8a74fee7ace20e7ad479eeef5551f36b5c8de"} {"level":"info","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"266100e6de0039088577080c6ab8a74fee7ace20e7ad479eeef5551f36b5c8de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d479c81eaeec15eaa672a83964a8bc9092b0c700fbfe3518486c1d3f6722b989","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"266100e6de0039088577080c6ab8a74fee7ace20e7ad479eeef5551f36b5c8de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:14:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:14:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["266100e6de0039088577080c6ab8a74fee7ace20e7ad479eeef5551f36b5c8de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"266100e6de0039088577080c6ab8a74fee7ace20e7ad479eeef5551f36b5c8de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"266100e6de0039088577080c6ab8a74fee7ace20e7ad479eeef5551f36b5c8de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:14:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:14:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["266100e6de0039088577080c6ab8a74fee7ace20e7ad479eeef5551f36b5c8de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d479c81eaeec15eaa672a83964a8bc9092b0c700fbfe3518486c1d3f6722b989"} {"level":"error","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"266100e6de0039088577080c6ab8a74fee7ace20e7ad479eeef5551f36b5c8de","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"266100e6de0039088577080c6ab8a74fee7ace20e7ad479eeef5551f36b5c8de\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d479c81eaeec15eaa672a83964a8bc9092b0c700fbfe3518486c1d3f6722b989","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:14:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:14:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d479c81eaeec15eaa672a83964a8bc9092b0c700fbfe3518486c1d3f6722b989"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d479c81eaeec15eaa672a83964a8bc9092b0c700fbfe3518486c1d3f6722b989","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"266100e6de0039088577080c6ab8a74fee7ace20e7ad479eeef5551f36b5c8de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:14:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:14:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/266100e6de0039088577080c6ab8a74fee7ace20e7ad479eeef5551f36b5c8de"} {"level":"info","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"266100e6de0039088577080c6ab8a74fee7ace20e7ad479eeef5551f36b5c8de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d479c81eaeec15eaa672a83964a8bc9092b0c700fbfe3518486c1d3f6722b989","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:14:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:14:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d479c81eaeec15eaa672a83964a8bc9092b0c700fbfe3518486c1d3f6722b989"} {"level":"info","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d479c81eaeec15eaa672a83964a8bc9092b0c700fbfe3518486c1d3f6722b989","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"266100e6de0039088577080c6ab8a74fee7ace20e7ad479eeef5551f36b5c8de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d479c81eaeec15eaa672a83964a8bc9092b0c700fbfe3518486c1d3f6722b989","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:14:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:14:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d479c81eaeec15eaa672a83964a8bc9092b0c700fbfe3518486c1d3f6722b989"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/266100e6de0039088577080c6ab8a74fee7ace20e7ad479eeef5551f36b5c8de"} {"level":"info","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d479c81eaeec15eaa672a83964a8bc9092b0c700fbfe3518486c1d3f6722b989","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d479c81eaeec15eaa672a83964a8bc9092b0c700fbfe3518486c1d3f6722b989","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d479c81eaeec15eaa672a83964a8bc9092b0c700fbfe3518486c1d3f6722b989","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:14:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:14:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d479c81eaeec15eaa672a83964a8bc9092b0c700fbfe3518486c1d3f6722b989","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"266100e6de0039088577080c6ab8a74fee7ace20e7ad479eeef5551f36b5c8de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:14:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:14:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["266100e6de0039088577080c6ab8a74fee7ace20e7ad479eeef5551f36b5c8de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d479c81eaeec15eaa672a83964a8bc9092b0c700fbfe3518486c1d3f6722b989"} {"level":"info","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"266100e6de0039088577080c6ab8a74fee7ace20e7ad479eeef5551f36b5c8de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d479c81eaeec15eaa672a83964a8bc9092b0c700fbfe3518486c1d3f6722b989","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"266100e6de0039088577080c6ab8a74fee7ace20e7ad479eeef5551f36b5c8de","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d479c81eaeec15eaa672a83964a8bc9092b0c700fbfe3518486c1d3f6722b989"} {"level":"debug","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d479c81eaeec15eaa672a83964a8bc9092b0c700fbfe3518486c1d3f6722b989","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:14:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:14:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d479c81eaeec15eaa672a83964a8bc9092b0c700fbfe3518486c1d3f6722b989"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/266100e6de0039088577080c6ab8a74fee7ace20e7ad479eeef5551f36b5c8de"} {"level":"info","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d479c81eaeec15eaa672a83964a8bc9092b0c700fbfe3518486c1d3f6722b989","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"600882e7a4e21d1103104def24fa07ad8cf8fd753357d36d5981f1f4128fbf22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:14:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:14:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"600882e7a4e21d1103104def24fa07ad8cf8fd753357d36d5981f1f4128fbf22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d479c81eaeec15eaa672a83964a8bc9092b0c700fbfe3518486c1d3f6722b989","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"600882e7a4e21d1103104def24fa07ad8cf8fd753357d36d5981f1f4128fbf22","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/600882e7a4e21d1103104def24fa07ad8cf8fd753357d36d5981f1f4128fbf22"} {"level":"debug","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"600882e7a4e21d1103104def24fa07ad8cf8fd753357d36d5981f1f4128fbf22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:14:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:14:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["600882e7a4e21d1103104def24fa07ad8cf8fd753357d36d5981f1f4128fbf22"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"600882e7a4e21d1103104def24fa07ad8cf8fd753357d36d5981f1f4128fbf22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"600882e7a4e21d1103104def24fa07ad8cf8fd753357d36d5981f1f4128fbf22","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d479c81eaeec15eaa672a83964a8bc9092b0c700fbfe3518486c1d3f6722b989"} {"level":"info","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/600882e7a4e21d1103104def24fa07ad8cf8fd753357d36d5981f1f4128fbf22"} {"level":"debug","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"236ab11e1218449d5d8d83205a41378869f9c7d889257a56b4546756e56c1d70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:14:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:14:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"236ab11e1218449d5d8d83205a41378869f9c7d889257a56b4546756e56c1d70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"236ab11e1218449d5d8d83205a41378869f9c7d889257a56b4546756e56c1d70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:14:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:14:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/236ab11e1218449d5d8d83205a41378869f9c7d889257a56b4546756e56c1d70"} {"level":"info","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"236ab11e1218449d5d8d83205a41378869f9c7d889257a56b4546756e56c1d70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"236ab11e1218449d5d8d83205a41378869f9c7d889257a56b4546756e56c1d70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:14:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:14:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"236ab11e1218449d5d8d83205a41378869f9c7d889257a56b4546756e56c1d70","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"236ab11e1218449d5d8d83205a41378869f9c7d889257a56b4546756e56c1d70\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"236ab11e1218449d5d8d83205a41378869f9c7d889257a56b4546756e56c1d70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"236ab11e1218449d5d8d83205a41378869f9c7d889257a56b4546756e56c1d70","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/236ab11e1218449d5d8d83205a41378869f9c7d889257a56b4546756e56c1d70"} {"level":"info","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/236ab11e1218449d5d8d83205a41378869f9c7d889257a56b4546756e56c1d70"} {"level":"debug","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a09813395a14c00ce1952172946cc99b21644a206b697ad2a3632ef5158a248","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:14:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:14:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a09813395a14c00ce1952172946cc99b21644a206b697ad2a3632ef5158a248","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a09813395a14c00ce1952172946cc99b21644a206b697ad2a3632ef5158a248","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"236ab11e1218449d5d8d83205a41378869f9c7d889257a56b4546756e56c1d70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:14:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:14:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["236ab11e1218449d5d8d83205a41378869f9c7d889257a56b4546756e56c1d70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a09813395a14c00ce1952172946cc99b21644a206b697ad2a3632ef5158a248"} {"level":"info","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"236ab11e1218449d5d8d83205a41378869f9c7d889257a56b4546756e56c1d70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a09813395a14c00ce1952172946cc99b21644a206b697ad2a3632ef5158a248","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"236ab11e1218449d5d8d83205a41378869f9c7d889257a56b4546756e56c1d70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a09813395a14c00ce1952172946cc99b21644a206b697ad2a3632ef5158a248","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a09813395a14c00ce1952172946cc99b21644a206b697ad2a3632ef5158a248"} {"level":"debug","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"236ab9b6777e905a0e0ec01a67b3da891d33e97c7a18b67f2742380587accb74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:14:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:14:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/236ab11e1218449d5d8d83205a41378869f9c7d889257a56b4546756e56c1d70"} {"level":"info","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"236ab9b6777e905a0e0ec01a67b3da891d33e97c7a18b67f2742380587accb74","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a09813395a14c00ce1952172946cc99b21644a206b697ad2a3632ef5158a248","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:14:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:14:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a09813395a14c00ce1952172946cc99b21644a206b697ad2a3632ef5158a248"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a09813395a14c00ce1952172946cc99b21644a206b697ad2a3632ef5158a248","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:14:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:14:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/236ab9b6777e905a0e0ec01a67b3da891d33e97c7a18b67f2742380587accb74"} {"level":"info","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"236ab9b6777e905a0e0ec01a67b3da891d33e97c7a18b67f2742380587accb74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:14:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:14:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["236ab9b6777e905a0e0ec01a67b3da891d33e97c7a18b67f2742380587accb74"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"236ab9b6777e905a0e0ec01a67b3da891d33e97c7a18b67f2742380587accb74","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a09813395a14c00ce1952172946cc99b21644a206b697ad2a3632ef5158a248","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:14:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:14:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0"} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"236ab9b6777e905a0e0ec01a67b3da891d33e97c7a18b67f2742380587accb74","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:14:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:14:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a09813395a14c00ce1952172946cc99b21644a206b697ad2a3632ef5158a248"} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:14:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:14:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69a983cbe0fdee8993f347b0025e355a2839922c5c626600fc22ab314a0ba716","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:14:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:14:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/236ab9b6777e905a0e0ec01a67b3da891d33e97c7a18b67f2742380587accb74"} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69a983cbe0fdee8993f347b0025e355a2839922c5c626600fc22ab314a0ba716","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69a983cbe0fdee8993f347b0025e355a2839922c5c626600fc22ab314a0ba716","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69a983cbe0fdee8993f347b0025e355a2839922c5c626600fc22ab314a0ba716","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0"} {"level":"debug","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69a983cbe0fdee8993f347b0025e355a2839922c5c626600fc22ab314a0ba716","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:14:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:14:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69a983cbe0fdee8993f347b0025e355a2839922c5c626600fc22ab314a0ba716"} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69a983cbe0fdee8993f347b0025e355a2839922c5c626600fc22ab314a0ba716","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69a983cbe0fdee8993f347b0025e355a2839922c5c626600fc22ab314a0ba716","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:14:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:14:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69a983cbe0fdee8993f347b0025e355a2839922c5c626600fc22ab314a0ba716"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69a983cbe0fdee8993f347b0025e355a2839922c5c626600fc22ab314a0ba716","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69a983cbe0fdee8993f347b0025e355a2839922c5c626600fc22ab314a0ba716","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:14:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:14:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69a983cbe0fdee8993f347b0025e355a2839922c5c626600fc22ab314a0ba716"} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69a983cbe0fdee8993f347b0025e355a2839922c5c626600fc22ab314a0ba716","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69a983cbe0fdee8993f347b0025e355a2839922c5c626600fc22ab314a0ba716","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69a983cbe0fdee8993f347b0025e355a2839922c5c626600fc22ab314a0ba716","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69a983cbe0fdee8993f347b0025e355a2839922c5c626600fc22ab314a0ba716"} {"level":"debug","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69a983cbe0fdee8993f347b0025e355a2839922c5c626600fc22ab314a0ba716","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69a983cbe0fdee8993f347b0025e355a2839922c5c626600fc22ab314a0ba716"} {"level":"debug","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69a983cbe0fdee8993f347b0025e355a2839922c5c626600fc22ab314a0ba716","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:14:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:14:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69a983cbe0fdee8993f347b0025e355a2839922c5c626600fc22ab314a0ba716"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69a983cbe0fdee8993f347b0025e355a2839922c5c626600fc22ab314a0ba716","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69a983cbe0fdee8993f347b0025e355a2839922c5c626600fc22ab314a0ba716","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:14:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:14:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69a983cbe0fdee8993f347b0025e355a2839922c5c626600fc22ab314a0ba716","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69a983cbe0fdee8993f347b0025e355a2839922c5c626600fc22ab314a0ba716","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69a983cbe0fdee8993f347b0025e355a2839922c5c626600fc22ab314a0ba716","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69a983cbe0fdee8993f347b0025e355a2839922c5c626600fc22ab314a0ba716"} {"level":"debug","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f059db7b7961090e5a7a755c23541941e4decfb4dd64198599ea1b68ec3b91fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:14:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:14:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f059db7b7961090e5a7a755c23541941e4decfb4dd64198599ea1b68ec3b91fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69a983cbe0fdee8993f347b0025e355a2839922c5c626600fc22ab314a0ba716","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"315d74e20053f94effd1ddd98d3ca17a0f13c522acd1898de1743e7d6a6f6bb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:14:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:14:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69a983cbe0fdee8993f347b0025e355a2839922c5c626600fc22ab314a0ba716"} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"315d74e20053f94effd1ddd98d3ca17a0f13c522acd1898de1743e7d6a6f6bb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f059db7b7961090e5a7a755c23541941e4decfb4dd64198599ea1b68ec3b91fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:14:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:14:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f059db7b7961090e5a7a755c23541941e4decfb4dd64198599ea1b68ec3b91fe"} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f059db7b7961090e5a7a755c23541941e4decfb4dd64198599ea1b68ec3b91fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"315d74e20053f94effd1ddd98d3ca17a0f13c522acd1898de1743e7d6a6f6bb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:14:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:14:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"315d74e20053f94effd1ddd98d3ca17a0f13c522acd1898de1743e7d6a6f6bb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f059db7b7961090e5a7a755c23541941e4decfb4dd64198599ea1b68ec3b91fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:14:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:14:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f059db7b7961090e5a7a755c23541941e4decfb4dd64198599ea1b68ec3b91fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/315d74e20053f94effd1ddd98d3ca17a0f13c522acd1898de1743e7d6a6f6bb8"} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f059db7b7961090e5a7a755c23541941e4decfb4dd64198599ea1b68ec3b91fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69a983cbe0fdee8993f347b0025e355a2839922c5c626600fc22ab314a0ba716","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:14:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:14:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69a983cbe0fdee8993f347b0025e355a2839922c5c626600fc22ab314a0ba716"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f059db7b7961090e5a7a755c23541941e4decfb4dd64198599ea1b68ec3b91fe"} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69a983cbe0fdee8993f347b0025e355a2839922c5c626600fc22ab314a0ba716","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"315d74e20053f94effd1ddd98d3ca17a0f13c522acd1898de1743e7d6a6f6bb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f059db7b7961090e5a7a755c23541941e4decfb4dd64198599ea1b68ec3b91fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69a983cbe0fdee8993f347b0025e355a2839922c5c626600fc22ab314a0ba716","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/315d74e20053f94effd1ddd98d3ca17a0f13c522acd1898de1743e7d6a6f6bb8"} {"level":"debug","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7924e76d412cfc214ead4267ed861d2b82394aed615a07ed6e230f78e7aecf34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:14:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:14:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7924e76d412cfc214ead4267ed861d2b82394aed615a07ed6e230f78e7aecf34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"315d74e20053f94effd1ddd98d3ca17a0f13c522acd1898de1743e7d6a6f6bb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:14:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:14:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["315d74e20053f94effd1ddd98d3ca17a0f13c522acd1898de1743e7d6a6f6bb8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f059db7b7961090e5a7a755c23541941e4decfb4dd64198599ea1b68ec3b91fe"} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"315d74e20053f94effd1ddd98d3ca17a0f13c522acd1898de1743e7d6a6f6bb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7924e76d412cfc214ead4267ed861d2b82394aed615a07ed6e230f78e7aecf34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"315d74e20053f94effd1ddd98d3ca17a0f13c522acd1898de1743e7d6a6f6bb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7924e76d412cfc214ead4267ed861d2b82394aed615a07ed6e230f78e7aecf34","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69a983cbe0fdee8993f347b0025e355a2839922c5c626600fc22ab314a0ba716"} {"level":"debug","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7924e76d412cfc214ead4267ed861d2b82394aed615a07ed6e230f78e7aecf34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:14:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:14:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7924e76d412cfc214ead4267ed861d2b82394aed615a07ed6e230f78e7aecf34"} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7924e76d412cfc214ead4267ed861d2b82394aed615a07ed6e230f78e7aecf34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7924e76d412cfc214ead4267ed861d2b82394aed615a07ed6e230f78e7aecf34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:14:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:14:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7924e76d412cfc214ead4267ed861d2b82394aed615a07ed6e230f78e7aecf34"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/315d74e20053f94effd1ddd98d3ca17a0f13c522acd1898de1743e7d6a6f6bb8"} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7924e76d412cfc214ead4267ed861d2b82394aed615a07ed6e230f78e7aecf34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7924e76d412cfc214ead4267ed861d2b82394aed615a07ed6e230f78e7aecf34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:14:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:14:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7924e76d412cfc214ead4267ed861d2b82394aed615a07ed6e230f78e7aecf34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6a464e7334f92dbb79e29b187ef30327b870cdba2737a15d5f6de405c52eea3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:14:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:14:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7924e76d412cfc214ead4267ed861d2b82394aed615a07ed6e230f78e7aecf34"} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6a464e7334f92dbb79e29b187ef30327b870cdba2737a15d5f6de405c52eea3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7924e76d412cfc214ead4267ed861d2b82394aed615a07ed6e230f78e7aecf34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:14:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:14:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7924e76d412cfc214ead4267ed861d2b82394aed615a07ed6e230f78e7aecf34"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6a464e7334f92dbb79e29b187ef30327b870cdba2737a15d5f6de405c52eea3"} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7924e76d412cfc214ead4267ed861d2b82394aed615a07ed6e230f78e7aecf34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d49d190e05be9e56acf4b1eb4075428d2b79866ceb86b4a75decdd107408a3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:14:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:14:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d49d190e05be9e56acf4b1eb4075428d2b79866ceb86b4a75decdd107408a3a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6a464e7334f92dbb79e29b187ef30327b870cdba2737a15d5f6de405c52eea3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:14:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:14:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d6a464e7334f92dbb79e29b187ef30327b870cdba2737a15d5f6de405c52eea3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7924e76d412cfc214ead4267ed861d2b82394aed615a07ed6e230f78e7aecf34"} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6a464e7334f92dbb79e29b187ef30327b870cdba2737a15d5f6de405c52eea3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a497d9aaf9a98d74c42a8366972949d7bd8752222f171d9d0cf5cf2adfe27694","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:14:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:14:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d49d190e05be9e56acf4b1eb4075428d2b79866ceb86b4a75decdd107408a3a"} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a497d9aaf9a98d74c42a8366972949d7bd8752222f171d9d0cf5cf2adfe27694","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7924e76d412cfc214ead4267ed861d2b82394aed615a07ed6e230f78e7aecf34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca081a27daab9f175f355fc80d0b19a93f51f455c82fe61449712be3c2a05928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:14:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:14:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a497d9aaf9a98d74c42a8366972949d7bd8752222f171d9d0cf5cf2adfe27694"} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca081a27daab9f175f355fc80d0b19a93f51f455c82fe61449712be3c2a05928","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d49d190e05be9e56acf4b1eb4075428d2b79866ceb86b4a75decdd107408a3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:14:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:14:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d49d190e05be9e56acf4b1eb4075428d2b79866ceb86b4a75decdd107408a3a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6a464e7334f92dbb79e29b187ef30327b870cdba2737a15d5f6de405c52eea3"} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca081a27daab9f175f355fc80d0b19a93f51f455c82fe61449712be3c2a05928"} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7924e76d412cfc214ead4267ed861d2b82394aed615a07ed6e230f78e7aecf34"} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d49d190e05be9e56acf4b1eb4075428d2b79866ceb86b4a75decdd107408a3a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6a464e7334f92dbb79e29b187ef30327b870cdba2737a15d5f6de405c52eea3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a497d9aaf9a98d74c42a8366972949d7bd8752222f171d9d0cf5cf2adfe27694","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:14:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:14:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a497d9aaf9a98d74c42a8366972949d7bd8752222f171d9d0cf5cf2adfe27694"} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3da69b42147de505eb68ea43d98a87c89340fa898c378074a99673fdfdbd6c55"} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a497d9aaf9a98d74c42a8366972949d7bd8752222f171d9d0cf5cf2adfe27694","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3da69b42147de505eb68ea43d98a87c89340fa898c378074a99673fdfdbd6c55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:14:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:14:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3da69b42147de505eb68ea43d98a87c89340fa898c378074a99673fdfdbd6c55"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85cf374d945ad05dcc51b429f1597475d0bdace0f5d6a245e87f811aad3fcece"} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439"} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c0efdd4f2dbb18ab05a600dd5a2317e209d965ca9eea5b4955448a2b1f95b9d"} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3da69b42147de505eb68ea43d98a87c89340fa898c378074a99673fdfdbd6c55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca081a27daab9f175f355fc80d0b19a93f51f455c82fe61449712be3c2a05928","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:14:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:14:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca081a27daab9f175f355fc80d0b19a93f51f455c82fe61449712be3c2a05928"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b06af06cb73ec2bd054772bfb03047263e4861b522cd73655f10ed86672aa38"} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d49d190e05be9e56acf4b1eb4075428d2b79866ceb86b4a75decdd107408a3a"} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca081a27daab9f175f355fc80d0b19a93f51f455c82fe61449712be3c2a05928","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85cf374d945ad05dcc51b429f1597475d0bdace0f5d6a245e87f811aad3fcece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:14:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:14:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85cf374d945ad05dcc51b429f1597475d0bdace0f5d6a245e87f811aad3fcece"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da"} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85cf374d945ad05dcc51b429f1597475d0bdace0f5d6a245e87f811aad3fcece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:14:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:14:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7"} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a497d9aaf9a98d74c42a8366972949d7bd8752222f171d9d0cf5cf2adfe27694"} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c0efdd4f2dbb18ab05a600dd5a2317e209d965ca9eea5b4955448a2b1f95b9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:14:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:14:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c0efdd4f2dbb18ab05a600dd5a2317e209d965ca9eea5b4955448a2b1f95b9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b83cbae08bdbcbbb874b2ede49d32b5ccc3b192d828ac034dd3539ea5255463"} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbac35b678a5c2d7abf7f337ce0ffdf53e300fb6e239381ef9306695146dcd66"} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3da69b42147de505eb68ea43d98a87c89340fa898c378074a99673fdfdbd6c55"} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c0efdd4f2dbb18ab05a600dd5a2317e209d965ca9eea5b4955448a2b1f95b9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b06af06cb73ec2bd054772bfb03047263e4861b522cd73655f10ed86672aa38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:14:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:14:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b06af06cb73ec2bd054772bfb03047263e4861b522cd73655f10ed86672aa38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca081a27daab9f175f355fc80d0b19a93f51f455c82fe61449712be3c2a05928"} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85cf374d945ad05dcc51b429f1597475d0bdace0f5d6a245e87f811aad3fcece"} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b06af06cb73ec2bd054772bfb03047263e4861b522cd73655f10ed86672aa38","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d49d190e05be9e56acf4b1eb4075428d2b79866ceb86b4a75decdd107408a3a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:14:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:14:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439"} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c0efdd4f2dbb18ab05a600dd5a2317e209d965ca9eea5b4955448a2b1f95b9d"} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:14:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:14:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b06af06cb73ec2bd054772bfb03047263e4861b522cd73655f10ed86672aa38"} {"level":"info","ts":"2026-07-24T02:14:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da"} {"level":"info","ts":"2026-07-24T02:14:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a497d9aaf9a98d74c42a8366972949d7bd8752222f171d9d0cf5cf2adfe27694","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:14:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:14:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a497d9aaf9a98d74c42a8366972949d7bd8752222f171d9d0cf5cf2adfe27694"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:14:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7"} {"level":"info","ts":"2026-07-24T02:14:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a497d9aaf9a98d74c42a8366972949d7bd8752222f171d9d0cf5cf2adfe27694","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b83cbae08bdbcbbb874b2ede49d32b5ccc3b192d828ac034dd3539ea5255463","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:14:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:14:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b83cbae08bdbcbbb874b2ede49d32b5ccc3b192d828ac034dd3539ea5255463"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:14:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a497d9aaf9a98d74c42a8366972949d7bd8752222f171d9d0cf5cf2adfe27694"} {"level":"info","ts":"2026-07-24T02:14:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b83cbae08bdbcbbb874b2ede49d32b5ccc3b192d828ac034dd3539ea5255463","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbac35b678a5c2d7abf7f337ce0ffdf53e300fb6e239381ef9306695146dcd66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:14:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:14:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dbac35b678a5c2d7abf7f337ce0ffdf53e300fb6e239381ef9306695146dcd66"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:14:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b83cbae08bdbcbbb874b2ede49d32b5ccc3b192d828ac034dd3539ea5255463"} {"level":"info","ts":"2026-07-24T02:14:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbac35b678a5c2d7abf7f337ce0ffdf53e300fb6e239381ef9306695146dcd66","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3da69b42147de505eb68ea43d98a87c89340fa898c378074a99673fdfdbd6c55","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca081a27daab9f175f355fc80d0b19a93f51f455c82fe61449712be3c2a05928","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85cf374d945ad05dcc51b429f1597475d0bdace0f5d6a245e87f811aad3fcece","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c0efdd4f2dbb18ab05a600dd5a2317e209d965ca9eea5b4955448a2b1f95b9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b06af06cb73ec2bd054772bfb03047263e4861b522cd73655f10ed86672aa38","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a497d9aaf9a98d74c42a8366972949d7bd8752222f171d9d0cf5cf2adfe27694","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b83cbae08bdbcbbb874b2ede49d32b5ccc3b192d828ac034dd3539ea5255463","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:14:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbac35b678a5c2d7abf7f337ce0ffdf53e300fb6e239381ef9306695146dcd66","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:14:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbac35b678a5c2d7abf7f337ce0ffdf53e300fb6e239381ef9306695146dcd66"} {"level":"info","ts":"2026-07-24T02:14:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0371f20f-b830-4b6b-8109-20f6835fa28b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:52866","PortSpecifier":{"PortValue":52866}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0371f20f-b830-4b6b-8109-20f6835fa28b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6bcabd.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T02:14:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0371f20f-b830-4b6b-8109-20f6835fa28b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:52866","PortSpecifier":{"PortValue":52866}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784859285,"nanos":742832428},"http":{"id":"0371f20f-b830-4b6b-8109-20f6835fa28b","method":"POST","headers":{":authority":"e2e-shared-a-6bcabd.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T02:14:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0371f20f-b830-4b6b-8109-20f6835fa28b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T02:14:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0371f20f-b830-4b6b-8109-20f6835fa28b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f29f66c2-a19e-4465-a7c7-78c9c558bf70","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=418f119d-8728-4d81-ae00-6c04fed31bc9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/28c99b380518"]}} {"level":"debug","ts":"2026-07-24T02:14:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0371f20f-b830-4b6b-8109-20f6835fa28b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/28c99b380518"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=418f119d-8728-4d81-ae00-6c04fed31bc9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f29f66c2-a19e-4465-a7c7-78c9c558bf70","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"69a983cbe0fdee8993f347b0025e355a2839922c5c626600fc22ab314a0ba716"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.81:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6bcabd.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T02:14:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0371f20f-b830-4b6b-8109-20f6835fa28b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:14:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0371f20f-b830-4b6b-8109-20f6835fa28b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:14:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0371f20f-b830-4b6b-8109-20f6835fa28b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6bcabd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:14:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0371f20f-b830-4b6b-8109-20f6835fa28b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T02:14:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0371f20f-b830-4b6b-8109-20f6835fa28b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T02:14:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0371f20f-b830-4b6b-8109-20f6835fa28b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T02:14:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0371f20f-b830-4b6b-8109-20f6835fa28b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T02:14:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0371f20f-b830-4b6b-8109-20f6835fa28b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T02:14:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ed0b7a16-4f7c-419b-b712-b5b64fa4ea6d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:33302","PortSpecifier":{"PortValue":33302}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ed0b7a16-4f7c-419b-b712-b5b64fa4ea6d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a7fbc1.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T02:14:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ed0b7a16-4f7c-419b-b712-b5b64fa4ea6d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:33302","PortSpecifier":{"PortValue":33302}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784859285,"nanos":788704106},"http":{"id":"ed0b7a16-4f7c-419b-b712-b5b64fa4ea6d","method":"POST","headers":{":authority":"e2e-shared-b-a7fbc1.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T02:14:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ed0b7a16-4f7c-419b-b712-b5b64fa4ea6d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T02:14:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ed0b7a16-4f7c-419b-b712-b5b64fa4ea6d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f29f66c2-a19e-4465-a7c7-78c9c558bf70","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=418f119d-8728-4d81-ae00-6c04fed31bc9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/28c99b380518"]}} {"level":"debug","ts":"2026-07-24T02:14:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ed0b7a16-4f7c-419b-b712-b5b64fa4ea6d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/28c99b380518"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=418f119d-8728-4d81-ae00-6c04fed31bc9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f29f66c2-a19e-4465-a7c7-78c9c558bf70","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a7fbc1.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T02:14:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed0b7a16-4f7c-419b-b712-b5b64fa4ea6d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:14:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed0b7a16-4f7c-419b-b712-b5b64fa4ea6d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:14:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed0b7a16-4f7c-419b-b712-b5b64fa4ea6d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a7fbc1/rate-test-model-a7fbc1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a7fbc1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:14:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ed0b7a16-4f7c-419b-b712-b5b64fa4ea6d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T02:14:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ed0b7a16-4f7c-419b-b712-b5b64fa4ea6d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T02:14:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ed0b7a16-4f7c-419b-b712-b5b64fa4ea6d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-24T02:14:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ed0b7a16-4f7c-419b-b712-b5b64fa4ea6d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T02:14:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ed0b7a16-4f7c-419b-b712-b5b64fa4ea6d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T02:14:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"635f50a2-5ebf-48f5-922d-0c24db514fe8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:52868","PortSpecifier":{"PortValue":52868}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"635f50a2-5ebf-48f5-922d-0c24db514fe8","method":"POST","path":"/ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd/v1/completions","host":"e2e-shared-a-6bcabd.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T02:14:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"635f50a2-5ebf-48f5-922d-0c24db514fe8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:52868","PortSpecifier":{"PortValue":52868}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784859285,"nanos":829579767},"http":{"id":"635f50a2-5ebf-48f5-922d-0c24db514fe8","method":"POST","headers":{":authority":"e2e-shared-a-6bcabd.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T02:14:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"635f50a2-5ebf-48f5-922d-0c24db514fe8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-QLZNE2xbtQgQ8K1V_bnLEGUQsKXlngGKmRLTWPNJcQPL7xT9QrbhXPUdo7LH"} {"level":"debug","ts":"2026-07-24T02:14:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"635f50a2-5ebf-48f5-922d-0c24db514fe8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6bcabd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-QLZNE2xbtQgQ8K1V_bnLEGUQsKXlngGKmRLTWPNJcQPL7xT9QrbhXPUdo7LH\"}"} {"level":"debug","ts":"2026-07-24T02:14:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"635f50a2-5ebf-48f5-922d-0c24db514fe8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6bcabd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"936c3ca6-df36-4063-b7b5-74aba6dc48e9","keyName":"e2e-rate-a-68c60f","subscription":"e2e-rate-iso-a-68c60f","tenant":"e2e-shared-a-6bcabd","userId":"936c3ca6-df36-4063-b7b5-74aba6dc48e9","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T02:14:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"635f50a2-5ebf-48f5-922d-0c24db514fe8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6bcabd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd\",\"requestedSubscription\":\"e2e-rate-iso-a-68c60f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T02:14:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"635f50a2-5ebf-48f5-922d-0c24db514fe8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6bcabd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6bcabd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-68c60f","namespace":"ai-tenant-e2e-shared-a-6bcabd","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd"}} {"level":"debug","ts":"2026-07-24T02:14:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"635f50a2-5ebf-48f5-922d-0c24db514fe8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T02:14:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"635f50a2-5ebf-48f5-922d-0c24db514fe8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:14:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"635f50a2-5ebf-48f5-922d-0c24db514fe8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:14:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"635f50a2-5ebf-48f5-922d-0c24db514fe8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6bcabd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:14:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"635f50a2-5ebf-48f5-922d-0c24db514fe8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:14:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"635f50a2-5ebf-48f5-922d-0c24db514fe8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T02:14:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"635f50a2-5ebf-48f5-922d-0c24db514fe8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T02:14:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"635f50a2-5ebf-48f5-922d-0c24db514fe8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-68c60f"} {"level":"debug","ts":"2026-07-24T02:14:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"635f50a2-5ebf-48f5-922d-0c24db514fe8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"936c3ca6-df36-4063-b7b5-74aba6dc48e9","keyName":"e2e-rate-a-68c60f","selected_subscription":"e2e-rate-iso-a-68c60f","selected_subscription_key":"ai-tenant-e2e-shared-a-6bcabd/e2e-rate-iso-a-68c60f@ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6bcabd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-68c60f","namespace":"ai-tenant-e2e-shared-a-6bcabd","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T02:14:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"635f50a2-5ebf-48f5-922d-0c24db514fe8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T02:14:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"635f50a2-5ebf-48f5-922d-0c24db514fe8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T02:14:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"288f2be0-8c33-4a94-afba-8bb4fd14b0b7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:52882","PortSpecifier":{"PortValue":52882}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"288f2be0-8c33-4a94-afba-8bb4fd14b0b7","method":"POST","path":"/ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd/v1/completions","host":"e2e-shared-a-6bcabd.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T02:14:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"288f2be0-8c33-4a94-afba-8bb4fd14b0b7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:52882","PortSpecifier":{"PortValue":52882}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784859286,"nanos":921397295},"http":{"id":"288f2be0-8c33-4a94-afba-8bb4fd14b0b7","method":"POST","headers":{":authority":"e2e-shared-a-6bcabd.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T02:14:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"288f2be0-8c33-4a94-afba-8bb4fd14b0b7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-QLZNE2xbtQgQ8K1V_bnLEGUQsKXlngGKmRLTWPNJcQPL7xT9QrbhXPUdo7LH"} {"level":"debug","ts":"2026-07-24T02:14:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"288f2be0-8c33-4a94-afba-8bb4fd14b0b7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6bcabd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-QLZNE2xbtQgQ8K1V_bnLEGUQsKXlngGKmRLTWPNJcQPL7xT9QrbhXPUdo7LH\"}"} {"level":"debug","ts":"2026-07-24T02:14:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"288f2be0-8c33-4a94-afba-8bb4fd14b0b7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6bcabd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"936c3ca6-df36-4063-b7b5-74aba6dc48e9","keyName":"e2e-rate-a-68c60f","subscription":"e2e-rate-iso-a-68c60f","tenant":"e2e-shared-a-6bcabd","userId":"936c3ca6-df36-4063-b7b5-74aba6dc48e9","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T02:14:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"288f2be0-8c33-4a94-afba-8bb4fd14b0b7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6bcabd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd\",\"requestedSubscription\":\"e2e-rate-iso-a-68c60f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T02:14:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"288f2be0-8c33-4a94-afba-8bb4fd14b0b7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6bcabd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6bcabd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-68c60f","namespace":"ai-tenant-e2e-shared-a-6bcabd","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd"}} {"level":"debug","ts":"2026-07-24T02:14:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"288f2be0-8c33-4a94-afba-8bb4fd14b0b7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T02:14:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"288f2be0-8c33-4a94-afba-8bb4fd14b0b7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:14:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"288f2be0-8c33-4a94-afba-8bb4fd14b0b7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:14:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"288f2be0-8c33-4a94-afba-8bb4fd14b0b7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6bcabd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:14:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"288f2be0-8c33-4a94-afba-8bb4fd14b0b7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:14:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"288f2be0-8c33-4a94-afba-8bb4fd14b0b7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-68c60f"} {"level":"debug","ts":"2026-07-24T02:14:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"288f2be0-8c33-4a94-afba-8bb4fd14b0b7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T02:14:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"288f2be0-8c33-4a94-afba-8bb4fd14b0b7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T02:14:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"288f2be0-8c33-4a94-afba-8bb4fd14b0b7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"936c3ca6-df36-4063-b7b5-74aba6dc48e9","keyName":"e2e-rate-a-68c60f","selected_subscription":"e2e-rate-iso-a-68c60f","selected_subscription_key":"ai-tenant-e2e-shared-a-6bcabd/e2e-rate-iso-a-68c60f@ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6bcabd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-68c60f","namespace":"ai-tenant-e2e-shared-a-6bcabd","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T02:14:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"288f2be0-8c33-4a94-afba-8bb4fd14b0b7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T02:14:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"288f2be0-8c33-4a94-afba-8bb4fd14b0b7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T02:14:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"31008cfb-6313-4bcb-bcb7-94fbcb48df8b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:52884","PortSpecifier":{"PortValue":52884}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"31008cfb-6313-4bcb-bcb7-94fbcb48df8b","method":"POST","path":"/ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd/v1/completions","host":"e2e-shared-a-6bcabd.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T02:14:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"31008cfb-6313-4bcb-bcb7-94fbcb48df8b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:52884","PortSpecifier":{"PortValue":52884}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784859287,"nanos":969962127},"http":{"id":"31008cfb-6313-4bcb-bcb7-94fbcb48df8b","method":"POST","headers":{":authority":"e2e-shared-a-6bcabd.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T02:14:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"31008cfb-6313-4bcb-bcb7-94fbcb48df8b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-QLZNE2xbtQgQ8K1V_bnLEGUQsKXlngGKmRLTWPNJcQPL7xT9QrbhXPUdo7LH"} {"level":"debug","ts":"2026-07-24T02:14:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"31008cfb-6313-4bcb-bcb7-94fbcb48df8b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6bcabd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-QLZNE2xbtQgQ8K1V_bnLEGUQsKXlngGKmRLTWPNJcQPL7xT9QrbhXPUdo7LH\"}"} {"level":"debug","ts":"2026-07-24T02:14:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"31008cfb-6313-4bcb-bcb7-94fbcb48df8b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6bcabd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"936c3ca6-df36-4063-b7b5-74aba6dc48e9","keyName":"e2e-rate-a-68c60f","subscription":"e2e-rate-iso-a-68c60f","tenant":"e2e-shared-a-6bcabd","userId":"936c3ca6-df36-4063-b7b5-74aba6dc48e9","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T02:14:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"31008cfb-6313-4bcb-bcb7-94fbcb48df8b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6bcabd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd\",\"requestedSubscription\":\"e2e-rate-iso-a-68c60f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T02:14:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"31008cfb-6313-4bcb-bcb7-94fbcb48df8b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6bcabd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6bcabd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-68c60f","namespace":"ai-tenant-e2e-shared-a-6bcabd","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd"}} {"level":"debug","ts":"2026-07-24T02:14:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"31008cfb-6313-4bcb-bcb7-94fbcb48df8b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T02:14:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31008cfb-6313-4bcb-bcb7-94fbcb48df8b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:14:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31008cfb-6313-4bcb-bcb7-94fbcb48df8b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:14:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31008cfb-6313-4bcb-bcb7-94fbcb48df8b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:14:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31008cfb-6313-4bcb-bcb7-94fbcb48df8b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6bcabd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:14:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31008cfb-6313-4bcb-bcb7-94fbcb48df8b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T02:14:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31008cfb-6313-4bcb-bcb7-94fbcb48df8b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-68c60f"} {"level":"debug","ts":"2026-07-24T02:14:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31008cfb-6313-4bcb-bcb7-94fbcb48df8b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T02:14:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31008cfb-6313-4bcb-bcb7-94fbcb48df8b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"936c3ca6-df36-4063-b7b5-74aba6dc48e9","keyName":"e2e-rate-a-68c60f","selected_subscription":"e2e-rate-iso-a-68c60f","selected_subscription_key":"ai-tenant-e2e-shared-a-6bcabd/e2e-rate-iso-a-68c60f@ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6bcabd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-68c60f","namespace":"ai-tenant-e2e-shared-a-6bcabd","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T02:14:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"31008cfb-6313-4bcb-bcb7-94fbcb48df8b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T02:14:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"31008cfb-6313-4bcb-bcb7-94fbcb48df8b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T02:14:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0b4d4f54-64d8-4745-ae8c-3d557286a8fd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:52896","PortSpecifier":{"PortValue":52896}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0b4d4f54-64d8-4745-ae8c-3d557286a8fd","method":"POST","path":"/ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd/v1/completions","host":"e2e-shared-a-6bcabd.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T02:14:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0b4d4f54-64d8-4745-ae8c-3d557286a8fd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:52896","PortSpecifier":{"PortValue":52896}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784859289,"nanos":15465897},"http":{"id":"0b4d4f54-64d8-4745-ae8c-3d557286a8fd","method":"POST","headers":{":authority":"e2e-shared-a-6bcabd.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T02:14:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0b4d4f54-64d8-4745-ae8c-3d557286a8fd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-QLZNE2xbtQgQ8K1V_bnLEGUQsKXlngGKmRLTWPNJcQPL7xT9QrbhXPUdo7LH"} {"level":"debug","ts":"2026-07-24T02:14:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0b4d4f54-64d8-4745-ae8c-3d557286a8fd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6bcabd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-QLZNE2xbtQgQ8K1V_bnLEGUQsKXlngGKmRLTWPNJcQPL7xT9QrbhXPUdo7LH\"}"} {"level":"debug","ts":"2026-07-24T02:14:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0b4d4f54-64d8-4745-ae8c-3d557286a8fd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6bcabd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"936c3ca6-df36-4063-b7b5-74aba6dc48e9","keyName":"e2e-rate-a-68c60f","subscription":"e2e-rate-iso-a-68c60f","tenant":"e2e-shared-a-6bcabd","userId":"936c3ca6-df36-4063-b7b5-74aba6dc48e9","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T02:14:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0b4d4f54-64d8-4745-ae8c-3d557286a8fd","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6bcabd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd\",\"requestedSubscription\":\"e2e-rate-iso-a-68c60f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T02:14:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0b4d4f54-64d8-4745-ae8c-3d557286a8fd","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6bcabd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6bcabd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-68c60f","namespace":"ai-tenant-e2e-shared-a-6bcabd","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd"}} {"level":"debug","ts":"2026-07-24T02:14:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0b4d4f54-64d8-4745-ae8c-3d557286a8fd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T02:14:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0b4d4f54-64d8-4745-ae8c-3d557286a8fd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:14:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0b4d4f54-64d8-4745-ae8c-3d557286a8fd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:14:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0b4d4f54-64d8-4745-ae8c-3d557286a8fd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6bcabd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:14:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0b4d4f54-64d8-4745-ae8c-3d557286a8fd","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:14:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0b4d4f54-64d8-4745-ae8c-3d557286a8fd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T02:14:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0b4d4f54-64d8-4745-ae8c-3d557286a8fd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T02:14:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0b4d4f54-64d8-4745-ae8c-3d557286a8fd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-68c60f"} {"level":"debug","ts":"2026-07-24T02:14:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0b4d4f54-64d8-4745-ae8c-3d557286a8fd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"936c3ca6-df36-4063-b7b5-74aba6dc48e9","keyName":"e2e-rate-a-68c60f","selected_subscription":"e2e-rate-iso-a-68c60f","selected_subscription_key":"ai-tenant-e2e-shared-a-6bcabd/e2e-rate-iso-a-68c60f@ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6bcabd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-68c60f","namespace":"ai-tenant-e2e-shared-a-6bcabd","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T02:14:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0b4d4f54-64d8-4745-ae8c-3d557286a8fd","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T02:14:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0b4d4f54-64d8-4745-ae8c-3d557286a8fd","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T02:14:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a83fd5e-0d35-45e0-b0ff-f2fe77e5a016","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:52912","PortSpecifier":{"PortValue":52912}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9a83fd5e-0d35-45e0-b0ff-f2fe77e5a016","method":"POST","path":"/ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd/v1/completions","host":"e2e-shared-a-6bcabd.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T02:14:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a83fd5e-0d35-45e0-b0ff-f2fe77e5a016","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:52912","PortSpecifier":{"PortValue":52912}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784859290,"nanos":56396603},"http":{"id":"9a83fd5e-0d35-45e0-b0ff-f2fe77e5a016","method":"POST","headers":{":authority":"e2e-shared-a-6bcabd.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T02:14:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9a83fd5e-0d35-45e0-b0ff-f2fe77e5a016","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-QLZNE2xbtQgQ8K1V_bnLEGUQsKXlngGKmRLTWPNJcQPL7xT9QrbhXPUdo7LH"} {"level":"debug","ts":"2026-07-24T02:14:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9a83fd5e-0d35-45e0-b0ff-f2fe77e5a016","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6bcabd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-QLZNE2xbtQgQ8K1V_bnLEGUQsKXlngGKmRLTWPNJcQPL7xT9QrbhXPUdo7LH\"}"} {"level":"debug","ts":"2026-07-24T02:14:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9a83fd5e-0d35-45e0-b0ff-f2fe77e5a016","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6bcabd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"936c3ca6-df36-4063-b7b5-74aba6dc48e9","keyName":"e2e-rate-a-68c60f","subscription":"e2e-rate-iso-a-68c60f","tenant":"e2e-shared-a-6bcabd","userId":"936c3ca6-df36-4063-b7b5-74aba6dc48e9","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T02:14:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9a83fd5e-0d35-45e0-b0ff-f2fe77e5a016","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6bcabd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd\",\"requestedSubscription\":\"e2e-rate-iso-a-68c60f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T02:14:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9a83fd5e-0d35-45e0-b0ff-f2fe77e5a016","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6bcabd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6bcabd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-68c60f","namespace":"ai-tenant-e2e-shared-a-6bcabd","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd"}} {"level":"debug","ts":"2026-07-24T02:14:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9a83fd5e-0d35-45e0-b0ff-f2fe77e5a016","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T02:14:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a83fd5e-0d35-45e0-b0ff-f2fe77e5a016","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:14:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a83fd5e-0d35-45e0-b0ff-f2fe77e5a016","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:14:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a83fd5e-0d35-45e0-b0ff-f2fe77e5a016","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6bcabd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:14:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a83fd5e-0d35-45e0-b0ff-f2fe77e5a016","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:14:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a83fd5e-0d35-45e0-b0ff-f2fe77e5a016","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-68c60f"} {"level":"debug","ts":"2026-07-24T02:14:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a83fd5e-0d35-45e0-b0ff-f2fe77e5a016","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T02:14:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a83fd5e-0d35-45e0-b0ff-f2fe77e5a016","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T02:14:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a83fd5e-0d35-45e0-b0ff-f2fe77e5a016","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"936c3ca6-df36-4063-b7b5-74aba6dc48e9","keyName":"e2e-rate-a-68c60f","selected_subscription":"e2e-rate-iso-a-68c60f","selected_subscription_key":"ai-tenant-e2e-shared-a-6bcabd/e2e-rate-iso-a-68c60f@ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6bcabd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-68c60f","namespace":"ai-tenant-e2e-shared-a-6bcabd","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T02:14:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a83fd5e-0d35-45e0-b0ff-f2fe77e5a016","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T02:14:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a83fd5e-0d35-45e0-b0ff-f2fe77e5a016","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T02:14:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e12d686b-8e29-4b6c-8fa0-d948c6c3f585","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:52918","PortSpecifier":{"PortValue":52918}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e12d686b-8e29-4b6c-8fa0-d948c6c3f585","method":"POST","path":"/ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd/v1/completions","host":"e2e-shared-a-6bcabd.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T02:14:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e12d686b-8e29-4b6c-8fa0-d948c6c3f585","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:52918","PortSpecifier":{"PortValue":52918}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784859291,"nanos":98465831},"http":{"id":"e12d686b-8e29-4b6c-8fa0-d948c6c3f585","method":"POST","headers":{":authority":"e2e-shared-a-6bcabd.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T02:14:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e12d686b-8e29-4b6c-8fa0-d948c6c3f585","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-QLZNE2xbtQgQ8K1V_bnLEGUQsKXlngGKmRLTWPNJcQPL7xT9QrbhXPUdo7LH"} {"level":"debug","ts":"2026-07-24T02:14:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e12d686b-8e29-4b6c-8fa0-d948c6c3f585","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6bcabd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-QLZNE2xbtQgQ8K1V_bnLEGUQsKXlngGKmRLTWPNJcQPL7xT9QrbhXPUdo7LH\"}"} {"level":"debug","ts":"2026-07-24T02:14:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e12d686b-8e29-4b6c-8fa0-d948c6c3f585","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6bcabd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"936c3ca6-df36-4063-b7b5-74aba6dc48e9","keyName":"e2e-rate-a-68c60f","subscription":"e2e-rate-iso-a-68c60f","tenant":"e2e-shared-a-6bcabd","userId":"936c3ca6-df36-4063-b7b5-74aba6dc48e9","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T02:14:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e12d686b-8e29-4b6c-8fa0-d948c6c3f585","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6bcabd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd\",\"requestedSubscription\":\"e2e-rate-iso-a-68c60f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T02:14:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e12d686b-8e29-4b6c-8fa0-d948c6c3f585","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6bcabd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6bcabd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-68c60f","namespace":"ai-tenant-e2e-shared-a-6bcabd","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd"}} {"level":"debug","ts":"2026-07-24T02:14:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e12d686b-8e29-4b6c-8fa0-d948c6c3f585","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T02:14:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e12d686b-8e29-4b6c-8fa0-d948c6c3f585","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:14:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e12d686b-8e29-4b6c-8fa0-d948c6c3f585","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:14:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e12d686b-8e29-4b6c-8fa0-d948c6c3f585","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:14:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e12d686b-8e29-4b6c-8fa0-d948c6c3f585","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6bcabd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:14:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e12d686b-8e29-4b6c-8fa0-d948c6c3f585","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T02:14:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e12d686b-8e29-4b6c-8fa0-d948c6c3f585","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T02:14:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e12d686b-8e29-4b6c-8fa0-d948c6c3f585","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-68c60f"} {"level":"debug","ts":"2026-07-24T02:14:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e12d686b-8e29-4b6c-8fa0-d948c6c3f585","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"936c3ca6-df36-4063-b7b5-74aba6dc48e9","keyName":"e2e-rate-a-68c60f","selected_subscription":"e2e-rate-iso-a-68c60f","selected_subscription_key":"ai-tenant-e2e-shared-a-6bcabd/e2e-rate-iso-a-68c60f@ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6bcabd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-68c60f","namespace":"ai-tenant-e2e-shared-a-6bcabd","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T02:14:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e12d686b-8e29-4b6c-8fa0-d948c6c3f585","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T02:14:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e12d686b-8e29-4b6c-8fa0-d948c6c3f585","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T02:14:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dc0d6943-d86b-4458-816e-52974ba3690a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:52924","PortSpecifier":{"PortValue":52924}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dc0d6943-d86b-4458-816e-52974ba3690a","method":"POST","path":"/ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd/v1/completions","host":"e2e-shared-a-6bcabd.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T02:14:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dc0d6943-d86b-4458-816e-52974ba3690a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:52924","PortSpecifier":{"PortValue":52924}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784859292,"nanos":141520613},"http":{"id":"dc0d6943-d86b-4458-816e-52974ba3690a","method":"POST","headers":{":authority":"e2e-shared-a-6bcabd.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T02:14:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dc0d6943-d86b-4458-816e-52974ba3690a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-QLZNE2xbtQgQ8K1V_bnLEGUQsKXlngGKmRLTWPNJcQPL7xT9QrbhXPUdo7LH"} {"level":"debug","ts":"2026-07-24T02:14:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dc0d6943-d86b-4458-816e-52974ba3690a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6bcabd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-QLZNE2xbtQgQ8K1V_bnLEGUQsKXlngGKmRLTWPNJcQPL7xT9QrbhXPUdo7LH\"}"} {"level":"debug","ts":"2026-07-24T02:14:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dc0d6943-d86b-4458-816e-52974ba3690a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6bcabd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"936c3ca6-df36-4063-b7b5-74aba6dc48e9","keyName":"e2e-rate-a-68c60f","subscription":"e2e-rate-iso-a-68c60f","tenant":"e2e-shared-a-6bcabd","userId":"936c3ca6-df36-4063-b7b5-74aba6dc48e9","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T02:14:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dc0d6943-d86b-4458-816e-52974ba3690a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6bcabd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd\",\"requestedSubscription\":\"e2e-rate-iso-a-68c60f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T02:14:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dc0d6943-d86b-4458-816e-52974ba3690a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6bcabd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6bcabd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-68c60f","namespace":"ai-tenant-e2e-shared-a-6bcabd","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd"}} {"level":"debug","ts":"2026-07-24T02:14:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dc0d6943-d86b-4458-816e-52974ba3690a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T02:14:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc0d6943-d86b-4458-816e-52974ba3690a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:14:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc0d6943-d86b-4458-816e-52974ba3690a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:14:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc0d6943-d86b-4458-816e-52974ba3690a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6bcabd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:14:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc0d6943-d86b-4458-816e-52974ba3690a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:14:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc0d6943-d86b-4458-816e-52974ba3690a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T02:14:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc0d6943-d86b-4458-816e-52974ba3690a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-68c60f"} {"level":"debug","ts":"2026-07-24T02:14:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc0d6943-d86b-4458-816e-52974ba3690a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T02:14:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc0d6943-d86b-4458-816e-52974ba3690a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"936c3ca6-df36-4063-b7b5-74aba6dc48e9","keyName":"e2e-rate-a-68c60f","selected_subscription":"e2e-rate-iso-a-68c60f","selected_subscription_key":"ai-tenant-e2e-shared-a-6bcabd/e2e-rate-iso-a-68c60f@ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6bcabd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-68c60f","namespace":"ai-tenant-e2e-shared-a-6bcabd","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T02:14:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dc0d6943-d86b-4458-816e-52974ba3690a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T02:14:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dc0d6943-d86b-4458-816e-52974ba3690a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T02:14:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b8a91a76-bed2-422b-978e-848377f6867a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:52928","PortSpecifier":{"PortValue":52928}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b8a91a76-bed2-422b-978e-848377f6867a","method":"POST","path":"/ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd/v1/completions","host":"e2e-shared-a-6bcabd.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T02:14:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b8a91a76-bed2-422b-978e-848377f6867a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:52928","PortSpecifier":{"PortValue":52928}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784859293,"nanos":181631238},"http":{"id":"b8a91a76-bed2-422b-978e-848377f6867a","method":"POST","headers":{":authority":"e2e-shared-a-6bcabd.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T02:14:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b8a91a76-bed2-422b-978e-848377f6867a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-QLZNE2xbtQgQ8K1V_bnLEGUQsKXlngGKmRLTWPNJcQPL7xT9QrbhXPUdo7LH"} {"level":"debug","ts":"2026-07-24T02:14:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b8a91a76-bed2-422b-978e-848377f6867a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6bcabd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-QLZNE2xbtQgQ8K1V_bnLEGUQsKXlngGKmRLTWPNJcQPL7xT9QrbhXPUdo7LH\"}"} {"level":"debug","ts":"2026-07-24T02:14:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b8a91a76-bed2-422b-978e-848377f6867a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6bcabd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"936c3ca6-df36-4063-b7b5-74aba6dc48e9","keyName":"e2e-rate-a-68c60f","subscription":"e2e-rate-iso-a-68c60f","tenant":"e2e-shared-a-6bcabd","userId":"936c3ca6-df36-4063-b7b5-74aba6dc48e9","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T02:14:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b8a91a76-bed2-422b-978e-848377f6867a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6bcabd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd\",\"requestedSubscription\":\"e2e-rate-iso-a-68c60f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T02:14:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b8a91a76-bed2-422b-978e-848377f6867a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6bcabd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6bcabd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-68c60f","namespace":"ai-tenant-e2e-shared-a-6bcabd","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd"}} {"level":"debug","ts":"2026-07-24T02:14:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b8a91a76-bed2-422b-978e-848377f6867a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T02:14:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8a91a76-bed2-422b-978e-848377f6867a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:14:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8a91a76-bed2-422b-978e-848377f6867a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:14:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8a91a76-bed2-422b-978e-848377f6867a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:14:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8a91a76-bed2-422b-978e-848377f6867a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6bcabd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:14:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b8a91a76-bed2-422b-978e-848377f6867a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T02:14:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b8a91a76-bed2-422b-978e-848377f6867a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-68c60f"} {"level":"debug","ts":"2026-07-24T02:14:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b8a91a76-bed2-422b-978e-848377f6867a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T02:14:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b8a91a76-bed2-422b-978e-848377f6867a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"936c3ca6-df36-4063-b7b5-74aba6dc48e9","keyName":"e2e-rate-a-68c60f","selected_subscription":"e2e-rate-iso-a-68c60f","selected_subscription_key":"ai-tenant-e2e-shared-a-6bcabd/e2e-rate-iso-a-68c60f@ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6bcabd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-68c60f","namespace":"ai-tenant-e2e-shared-a-6bcabd","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T02:14:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b8a91a76-bed2-422b-978e-848377f6867a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T02:14:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b8a91a76-bed2-422b-978e-848377f6867a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T02:15:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5c934b6e-4f72-42b4-8cfa-6d7d39c2b091","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:43568","PortSpecifier":{"PortValue":43568}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5c934b6e-4f72-42b4-8cfa-6d7d39c2b091","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6bcabd.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T02:15:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5c934b6e-4f72-42b4-8cfa-6d7d39c2b091","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:43568","PortSpecifier":{"PortValue":43568}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784859301,"nanos":963678929},"http":{"id":"5c934b6e-4f72-42b4-8cfa-6d7d39c2b091","method":"POST","headers":{":authority":"e2e-shared-a-6bcabd.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T02:15:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5c934b6e-4f72-42b4-8cfa-6d7d39c2b091","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T02:15:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5c934b6e-4f72-42b4-8cfa-6d7d39c2b091","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f29f66c2-a19e-4465-a7c7-78c9c558bf70","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=418f119d-8728-4d81-ae00-6c04fed31bc9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/28c99b380518"]}} {"level":"debug","ts":"2026-07-24T02:15:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5c934b6e-4f72-42b4-8cfa-6d7d39c2b091","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/28c99b380518"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=418f119d-8728-4d81-ae00-6c04fed31bc9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f29f66c2-a19e-4465-a7c7-78c9c558bf70","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"69a983cbe0fdee8993f347b0025e355a2839922c5c626600fc22ab314a0ba716"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.81:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6bcabd.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T02:15:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c934b6e-4f72-42b4-8cfa-6d7d39c2b091","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:15:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c934b6e-4f72-42b4-8cfa-6d7d39c2b091","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:15:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c934b6e-4f72-42b4-8cfa-6d7d39c2b091","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6bcabd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:15:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5c934b6e-4f72-42b4-8cfa-6d7d39c2b091","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T02:15:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c934b6e-4f72-42b4-8cfa-6d7d39c2b091","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T02:15:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c934b6e-4f72-42b4-8cfa-6d7d39c2b091","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-24T02:15:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5c934b6e-4f72-42b4-8cfa-6d7d39c2b091","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T02:15:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5c934b6e-4f72-42b4-8cfa-6d7d39c2b091","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T02:15:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f6d5c048-324c-4054-8cde-96b7c15e85f3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:44710","PortSpecifier":{"PortValue":44710}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f6d5c048-324c-4054-8cde-96b7c15e85f3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a7fbc1.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T02:15:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f6d5c048-324c-4054-8cde-96b7c15e85f3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:44710","PortSpecifier":{"PortValue":44710}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784859302,"nanos":1482838},"http":{"id":"f6d5c048-324c-4054-8cde-96b7c15e85f3","method":"POST","headers":{":authority":"e2e-shared-b-a7fbc1.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T02:15:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f6d5c048-324c-4054-8cde-96b7c15e85f3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T02:15:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f6d5c048-324c-4054-8cde-96b7c15e85f3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f29f66c2-a19e-4465-a7c7-78c9c558bf70","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=418f119d-8728-4d81-ae00-6c04fed31bc9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/28c99b380518"]}} {"level":"debug","ts":"2026-07-24T02:15:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f6d5c048-324c-4054-8cde-96b7c15e85f3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/28c99b380518"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=418f119d-8728-4d81-ae00-6c04fed31bc9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f29f66c2-a19e-4465-a7c7-78c9c558bf70","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a7fbc1.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T02:15:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6d5c048-324c-4054-8cde-96b7c15e85f3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:15:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6d5c048-324c-4054-8cde-96b7c15e85f3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:15:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6d5c048-324c-4054-8cde-96b7c15e85f3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a7fbc1/rate-test-model-a7fbc1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a7fbc1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:15:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f6d5c048-324c-4054-8cde-96b7c15e85f3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T02:15:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6d5c048-324c-4054-8cde-96b7c15e85f3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T02:15:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6d5c048-324c-4054-8cde-96b7c15e85f3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-24T02:15:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f6d5c048-324c-4054-8cde-96b7c15e85f3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T02:15:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f6d5c048-324c-4054-8cde-96b7c15e85f3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T02:15:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f6b5c73e-7d11-4849-b676-355f9b1752fc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:43572","PortSpecifier":{"PortValue":43572}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f6b5c73e-7d11-4849-b676-355f9b1752fc","method":"POST","path":"/ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd/v1/completions","host":"e2e-shared-a-6bcabd.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T02:15:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f6b5c73e-7d11-4849-b676-355f9b1752fc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:43572","PortSpecifier":{"PortValue":43572}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784859302,"nanos":42752068},"http":{"id":"f6b5c73e-7d11-4849-b676-355f9b1752fc","method":"POST","headers":{":authority":"e2e-shared-a-6bcabd.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T02:15:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f6b5c73e-7d11-4849-b676-355f9b1752fc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-JyMyay0Q6gyxQzgh_bbLnArUWiiVNW4TXuO86Z72xCMgT9zkiCdx1KdtYuqO"} {"level":"debug","ts":"2026-07-24T02:15:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f6b5c73e-7d11-4849-b676-355f9b1752fc","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6bcabd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-JyMyay0Q6gyxQzgh_bbLnArUWiiVNW4TXuO86Z72xCMgT9zkiCdx1KdtYuqO\"}"} {"level":"debug","ts":"2026-07-24T02:15:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f6b5c73e-7d11-4849-b676-355f9b1752fc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6bcabd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d053093a-1fa4-44ca-b239-afa682f2881b","keyName":"e2e-rate-a-d3962f","subscription":"e2e-rate-iso-a-d3962f","tenant":"e2e-shared-a-6bcabd","userId":"d053093a-1fa4-44ca-b239-afa682f2881b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T02:15:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f6b5c73e-7d11-4849-b676-355f9b1752fc","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6bcabd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd\",\"requestedSubscription\":\"e2e-rate-iso-a-d3962f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T02:15:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f6b5c73e-7d11-4849-b676-355f9b1752fc","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6bcabd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6bcabd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d3962f","namespace":"ai-tenant-e2e-shared-a-6bcabd","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd"}} {"level":"debug","ts":"2026-07-24T02:15:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f6b5c73e-7d11-4849-b676-355f9b1752fc","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T02:15:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6b5c73e-7d11-4849-b676-355f9b1752fc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:15:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6b5c73e-7d11-4849-b676-355f9b1752fc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:15:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6b5c73e-7d11-4849-b676-355f9b1752fc","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:15:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6b5c73e-7d11-4849-b676-355f9b1752fc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6bcabd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:15:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6b5c73e-7d11-4849-b676-355f9b1752fc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T02:15:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6b5c73e-7d11-4849-b676-355f9b1752fc","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d3962f"} {"level":"debug","ts":"2026-07-24T02:15:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6b5c73e-7d11-4849-b676-355f9b1752fc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T02:15:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6b5c73e-7d11-4849-b676-355f9b1752fc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d053093a-1fa4-44ca-b239-afa682f2881b","keyName":"e2e-rate-a-d3962f","selected_subscription":"e2e-rate-iso-a-d3962f","selected_subscription_key":"ai-tenant-e2e-shared-a-6bcabd/e2e-rate-iso-a-d3962f@ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6bcabd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d3962f","namespace":"ai-tenant-e2e-shared-a-6bcabd","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T02:15:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f6b5c73e-7d11-4849-b676-355f9b1752fc","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T02:15:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f6b5c73e-7d11-4849-b676-355f9b1752fc","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T02:15:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3c638adc-1499-45db-b47c-ca38018d0a53","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:43586","PortSpecifier":{"PortValue":43586}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3c638adc-1499-45db-b47c-ca38018d0a53","method":"POST","path":"/ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd/v1/completions","host":"e2e-shared-a-6bcabd.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T02:15:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3c638adc-1499-45db-b47c-ca38018d0a53","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:43586","PortSpecifier":{"PortValue":43586}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784859303,"nanos":85060942},"http":{"id":"3c638adc-1499-45db-b47c-ca38018d0a53","method":"POST","headers":{":authority":"e2e-shared-a-6bcabd.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T02:15:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3c638adc-1499-45db-b47c-ca38018d0a53","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-JyMyay0Q6gyxQzgh_bbLnArUWiiVNW4TXuO86Z72xCMgT9zkiCdx1KdtYuqO"} {"level":"debug","ts":"2026-07-24T02:15:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3c638adc-1499-45db-b47c-ca38018d0a53","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6bcabd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-JyMyay0Q6gyxQzgh_bbLnArUWiiVNW4TXuO86Z72xCMgT9zkiCdx1KdtYuqO\"}"} {"level":"debug","ts":"2026-07-24T02:15:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3c638adc-1499-45db-b47c-ca38018d0a53","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6bcabd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d053093a-1fa4-44ca-b239-afa682f2881b","keyName":"e2e-rate-a-d3962f","subscription":"e2e-rate-iso-a-d3962f","tenant":"e2e-shared-a-6bcabd","userId":"d053093a-1fa4-44ca-b239-afa682f2881b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T02:15:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3c638adc-1499-45db-b47c-ca38018d0a53","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6bcabd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd\",\"requestedSubscription\":\"e2e-rate-iso-a-d3962f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T02:15:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3c638adc-1499-45db-b47c-ca38018d0a53","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6bcabd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6bcabd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d3962f","namespace":"ai-tenant-e2e-shared-a-6bcabd","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd"}} {"level":"debug","ts":"2026-07-24T02:15:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3c638adc-1499-45db-b47c-ca38018d0a53","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T02:15:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c638adc-1499-45db-b47c-ca38018d0a53","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:15:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c638adc-1499-45db-b47c-ca38018d0a53","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:15:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c638adc-1499-45db-b47c-ca38018d0a53","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6bcabd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:15:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c638adc-1499-45db-b47c-ca38018d0a53","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:15:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c638adc-1499-45db-b47c-ca38018d0a53","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T02:15:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c638adc-1499-45db-b47c-ca38018d0a53","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d3962f"} {"level":"debug","ts":"2026-07-24T02:15:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c638adc-1499-45db-b47c-ca38018d0a53","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T02:15:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c638adc-1499-45db-b47c-ca38018d0a53","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d053093a-1fa4-44ca-b239-afa682f2881b","keyName":"e2e-rate-a-d3962f","selected_subscription":"e2e-rate-iso-a-d3962f","selected_subscription_key":"ai-tenant-e2e-shared-a-6bcabd/e2e-rate-iso-a-d3962f@ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6bcabd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d3962f","namespace":"ai-tenant-e2e-shared-a-6bcabd","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T02:15:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3c638adc-1499-45db-b47c-ca38018d0a53","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T02:15:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3c638adc-1499-45db-b47c-ca38018d0a53","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T02:15:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ca910ad-ba44-46d8-ac5a-e0d761a433ce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:43592","PortSpecifier":{"PortValue":43592}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5ca910ad-ba44-46d8-ac5a-e0d761a433ce","method":"POST","path":"/ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd/v1/completions","host":"e2e-shared-a-6bcabd.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T02:15:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ca910ad-ba44-46d8-ac5a-e0d761a433ce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:43592","PortSpecifier":{"PortValue":43592}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784859304,"nanos":128883219},"http":{"id":"5ca910ad-ba44-46d8-ac5a-e0d761a433ce","method":"POST","headers":{":authority":"e2e-shared-a-6bcabd.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T02:15:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5ca910ad-ba44-46d8-ac5a-e0d761a433ce","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-JyMyay0Q6gyxQzgh_bbLnArUWiiVNW4TXuO86Z72xCMgT9zkiCdx1KdtYuqO"} {"level":"debug","ts":"2026-07-24T02:15:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5ca910ad-ba44-46d8-ac5a-e0d761a433ce","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6bcabd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-JyMyay0Q6gyxQzgh_bbLnArUWiiVNW4TXuO86Z72xCMgT9zkiCdx1KdtYuqO\"}"} {"level":"debug","ts":"2026-07-24T02:15:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5ca910ad-ba44-46d8-ac5a-e0d761a433ce","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6bcabd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d053093a-1fa4-44ca-b239-afa682f2881b","keyName":"e2e-rate-a-d3962f","subscription":"e2e-rate-iso-a-d3962f","tenant":"e2e-shared-a-6bcabd","userId":"d053093a-1fa4-44ca-b239-afa682f2881b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T02:15:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5ca910ad-ba44-46d8-ac5a-e0d761a433ce","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6bcabd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd\",\"requestedSubscription\":\"e2e-rate-iso-a-d3962f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T02:15:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5ca910ad-ba44-46d8-ac5a-e0d761a433ce","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6bcabd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6bcabd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d3962f","namespace":"ai-tenant-e2e-shared-a-6bcabd","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd"}} {"level":"debug","ts":"2026-07-24T02:15:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5ca910ad-ba44-46d8-ac5a-e0d761a433ce","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T02:15:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ca910ad-ba44-46d8-ac5a-e0d761a433ce","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:15:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ca910ad-ba44-46d8-ac5a-e0d761a433ce","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:15:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ca910ad-ba44-46d8-ac5a-e0d761a433ce","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:15:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ca910ad-ba44-46d8-ac5a-e0d761a433ce","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6bcabd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:15:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ca910ad-ba44-46d8-ac5a-e0d761a433ce","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T02:15:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ca910ad-ba44-46d8-ac5a-e0d761a433ce","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d3962f"} {"level":"debug","ts":"2026-07-24T02:15:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ca910ad-ba44-46d8-ac5a-e0d761a433ce","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T02:15:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ca910ad-ba44-46d8-ac5a-e0d761a433ce","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d053093a-1fa4-44ca-b239-afa682f2881b","keyName":"e2e-rate-a-d3962f","selected_subscription":"e2e-rate-iso-a-d3962f","selected_subscription_key":"ai-tenant-e2e-shared-a-6bcabd/e2e-rate-iso-a-d3962f@ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6bcabd","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d3962f","namespace":"ai-tenant-e2e-shared-a-6bcabd","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-6bcabd/rate-test-model-6bcabd"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T02:15:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ca910ad-ba44-46d8-ac5a-e0d761a433ce","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T02:15:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ca910ad-ba44-46d8-ac5a-e0d761a433ce","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T02:15:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4a7d1144-bae1-4631-b445-68b35d9a1516","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:44716","PortSpecifier":{"PortValue":44716}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4a7d1144-bae1-4631-b445-68b35d9a1516","method":"POST","path":"/ai-tenant-e2e-shared-b-a7fbc1/rate-test-model-a7fbc1/v1/completions","host":"e2e-shared-b-a7fbc1.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T02:15:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4a7d1144-bae1-4631-b445-68b35d9a1516","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:44716","PortSpecifier":{"PortValue":44716}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784859304,"nanos":167145999},"http":{"id":"4a7d1144-bae1-4631-b445-68b35d9a1516","method":"POST","headers":{":authority":"e2e-shared-b-a7fbc1.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-a7fbc1/rate-test-model-a7fbc1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T02:15:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4a7d1144-bae1-4631-b445-68b35d9a1516","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-109rTQi7SxYnq32eP_KnnJ4M79Xb9fIyg8km3Fvtl0PpXDVFTRO9ykZEquifd"} {"level":"debug","ts":"2026-07-24T02:15:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4a7d1144-bae1-4631-b445-68b35d9a1516","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-a7fbc1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-109rTQi7SxYnq32eP_KnnJ4M79Xb9fIyg8km3Fvtl0PpXDVFTRO9ykZEquifd\"}"} {"level":"debug","ts":"2026-07-24T02:15:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4a7d1144-bae1-4631-b445-68b35d9a1516","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-a7fbc1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a2a7f785-ff26-4526-abcd-3adcada1a2af","keyName":"e2e-rate-b-d3962f","subscription":"e2e-rate-iso-b-d3962f","tenant":"e2e-shared-b-a7fbc1","userId":"a2a7f785-ff26-4526-abcd-3adcada1a2af","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T02:15:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4a7d1144-bae1-4631-b445-68b35d9a1516","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-a7fbc1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-a7fbc1/rate-test-model-a7fbc1\",\"requestedSubscription\":\"e2e-rate-iso-b-d3962f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T02:15:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4a7d1144-bae1-4631-b445-68b35d9a1516","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-a7fbc1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a7fbc1","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-d3962f","namespace":"ai-tenant-e2e-shared-b-a7fbc1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-a7fbc1/rate-test-model-a7fbc1"}} {"level":"debug","ts":"2026-07-24T02:15:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4a7d1144-bae1-4631-b445-68b35d9a1516","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T02:15:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a7d1144-bae1-4631-b445-68b35d9a1516","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:15:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a7d1144-bae1-4631-b445-68b35d9a1516","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:15:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a7d1144-bae1-4631-b445-68b35d9a1516","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a7fbc1/rate-test-model-a7fbc1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a7fbc1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:15:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a7d1144-bae1-4631-b445-68b35d9a1516","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:15:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a7d1144-bae1-4631-b445-68b35d9a1516","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T02:15:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a7d1144-bae1-4631-b445-68b35d9a1516","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-d3962f"} {"level":"debug","ts":"2026-07-24T02:15:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a7d1144-bae1-4631-b445-68b35d9a1516","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T02:15:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a7d1144-bae1-4631-b445-68b35d9a1516","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a2a7f785-ff26-4526-abcd-3adcada1a2af","keyName":"e2e-rate-b-d3962f","selected_subscription":"e2e-rate-iso-b-d3962f","selected_subscription_key":"ai-tenant-e2e-shared-b-a7fbc1/e2e-rate-iso-b-d3962f@ai-tenant-e2e-shared-b-a7fbc1/rate-test-model-a7fbc1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a7fbc1","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-d3962f","namespace":"ai-tenant-e2e-shared-b-a7fbc1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-a7fbc1/rate-test-model-a7fbc1"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T02:15:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4a7d1144-bae1-4631-b445-68b35d9a1516","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T02:15:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4a7d1144-bae1-4631-b445-68b35d9a1516","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T02:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3da69b42147de505eb68ea43d98a87c89340fa898c378074a99673fdfdbd6c55"} {"level":"info","ts":"2026-07-24T02:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b83cbae08bdbcbbb874b2ede49d32b5ccc3b192d828ac034dd3539ea5255463"} {"level":"info","ts":"2026-07-24T02:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f059db7b7961090e5a7a755c23541941e4decfb4dd64198599ea1b68ec3b91fe"} {"level":"info","ts":"2026-07-24T02:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/85cf374d945ad05dcc51b429f1597475d0bdace0f5d6a245e87f811aad3fcece"} {"level":"info","ts":"2026-07-24T02:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3dc323c5b44a1e8a82da61f68dba06066f4ecd9fbc98dbc0c9adcc2783ddaba7"} {"level":"info","ts":"2026-07-24T02:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0d49d190e05be9e56acf4b1eb4075428d2b79866ceb86b4a75decdd107408a3a"} {"level":"info","ts":"2026-07-24T02:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/266100e6de0039088577080c6ab8a74fee7ace20e7ad479eeef5551f36b5c8de"} {"level":"info","ts":"2026-07-24T02:15:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5a09813395a14c00ce1952172946cc99b21644a206b697ad2a3632ef5158a248"} {"level":"info","ts":"2026-07-24T02:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ca081a27daab9f175f355fc80d0b19a93f51f455c82fe61449712be3c2a05928"} {"level":"info","ts":"2026-07-24T02:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7924e76d412cfc214ead4267ed861d2b82394aed615a07ed6e230f78e7aecf34"} {"level":"info","ts":"2026-07-24T02:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/315d74e20053f94effd1ddd98d3ca17a0f13c522acd1898de1743e7d6a6f6bb8"} {"level":"info","ts":"2026-07-24T02:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/236ab9b6777e905a0e0ec01a67b3da891d33e97c7a18b67f2742380587accb74"} {"level":"info","ts":"2026-07-24T02:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d479c81eaeec15eaa672a83964a8bc9092b0c700fbfe3518486c1d3f6722b989"} {"level":"info","ts":"2026-07-24T02:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/95317ea88f37bab475b3f6abc6ef549fa4ed0aca11b55881e62eead07cd7e3e0"} {"level":"info","ts":"2026-07-24T02:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d6a464e7334f92dbb79e29b187ef30327b870cdba2737a15d5f6de405c52eea3"} {"level":"info","ts":"2026-07-24T02:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/236ab11e1218449d5d8d83205a41378869f9c7d889257a56b4546756e56c1d70"} {"level":"info","ts":"2026-07-24T02:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a497d9aaf9a98d74c42a8366972949d7bd8752222f171d9d0cf5cf2adfe27694"} {"level":"info","ts":"2026-07-24T02:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/69a983cbe0fdee8993f347b0025e355a2839922c5c626600fc22ab314a0ba716"} {"level":"info","ts":"2026-07-24T02:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7c0efdd4f2dbb18ab05a600dd5a2317e209d965ca9eea5b4955448a2b1f95b9d"} {"level":"info","ts":"2026-07-24T02:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dbac35b678a5c2d7abf7f337ce0ffdf53e300fb6e239381ef9306695146dcd66"} {"level":"info","ts":"2026-07-24T02:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b06af06cb73ec2bd054772bfb03047263e4861b522cd73655f10ed86672aa38"} {"level":"info","ts":"2026-07-24T02:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/600882e7a4e21d1103104def24fa07ad8cf8fd753357d36d5981f1f4128fbf22"} {"level":"info","ts":"2026-07-24T02:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9dbbfcf5ae41372db7dcc72a079bdd769ed55cfbce7ab520d51f2f7c067305da"} {"level":"info","ts":"2026-07-24T02:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/321389ba0ff5573bd0fc2d44d95650dcae7942471e0dfe94e3843ddd6b0ee439"} {"level":"info","ts":"2026-07-24T02:16:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"82aa3d12-d09c-4278-beac-7dea8628e3d5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:52508","PortSpecifier":{"PortValue":52508}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"82aa3d12-d09c-4278-beac-7dea8628e3d5","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T02:16:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"82aa3d12-d09c-4278-beac-7dea8628e3d5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:52508","PortSpecifier":{"PortValue":52508}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784859373,"nanos":740608557},"http":{"id":"82aa3d12-d09c-4278-beac-7dea8628e3d5","method":"POST","headers":{":authority":"maas.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T02:16:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"82aa3d12-d09c-4278-beac-7dea8628e3d5","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T02:16:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"82aa3d12-d09c-4278-beac-7dea8628e3d5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f29f66c2-a19e-4465-a7c7-78c9c558bf70","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=418f119d-8728-4d81-ae00-6c04fed31bc9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/28c99b380518"]}} {"level":"debug","ts":"2026-07-24T02:16:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"82aa3d12-d09c-4278-beac-7dea8628e3d5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/28c99b380518"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=418f119d-8728-4d81-ae00-6c04fed31bc9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f29f66c2-a19e-4465-a7c7-78c9c558bf70","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T02:16:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82aa3d12-d09c-4278-beac-7dea8628e3d5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:16:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82aa3d12-d09c-4278-beac-7dea8628e3d5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:16:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82aa3d12-d09c-4278-beac-7dea8628e3d5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:16:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"82aa3d12-d09c-4278-beac-7dea8628e3d5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T02:16:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82aa3d12-d09c-4278-beac-7dea8628e3d5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T02:16:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82aa3d12-d09c-4278-beac-7dea8628e3d5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T02:16:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"82aa3d12-d09c-4278-beac-7dea8628e3d5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T02:16:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"82aa3d12-d09c-4278-beac-7dea8628e3d5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T02:16:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"71083cc0-6ddd-41ff-a40a-7064e26a2abb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:52516","PortSpecifier":{"PortValue":52516}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"71083cc0-6ddd-41ff-a40a-7064e26a2abb","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T02:16:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"71083cc0-6ddd-41ff-a40a-7064e26a2abb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:52516","PortSpecifier":{"PortValue":52516}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784859373,"nanos":787669368},"http":{"id":"71083cc0-6ddd-41ff-a40a-7064e26a2abb","method":"POST","headers":{":authority":"maas.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T02:16:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"71083cc0-6ddd-41ff-a40a-7064e26a2abb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-2N64vbrlTzH3Twb1_F94mJhKfoH0yybd6KgR5Yjdcu4x2WC5tq1qSzgR2cQj"} {"level":"debug","ts":"2026-07-24T02:16:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"71083cc0-6ddd-41ff-a40a-7064e26a2abb","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-2N64vbrlTzH3Twb1_F94mJhKfoH0yybd6KgR5Yjdcu4x2WC5tq1qSzgR2cQj\"}"} {"level":"debug","ts":"2026-07-24T02:16:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"71083cc0-6ddd-41ff-a40a-7064e26a2abb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3a86b4d1-1fab-49d5-9546-bccd809aa33c","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"3a86b4d1-1fab-49d5-9546-bccd809aa33c","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T02:16:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"71083cc0-6ddd-41ff-a40a-7064e26a2abb","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T02:16:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"71083cc0-6ddd-41ff-a40a-7064e26a2abb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}} {"level":"debug","ts":"2026-07-24T02:16:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"71083cc0-6ddd-41ff-a40a-7064e26a2abb","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T02:16:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71083cc0-6ddd-41ff-a40a-7064e26a2abb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:16:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71083cc0-6ddd-41ff-a40a-7064e26a2abb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:16:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71083cc0-6ddd-41ff-a40a-7064e26a2abb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:16:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71083cc0-6ddd-41ff-a40a-7064e26a2abb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:16:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71083cc0-6ddd-41ff-a40a-7064e26a2abb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T02:16:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71083cc0-6ddd-41ff-a40a-7064e26a2abb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T02:16:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71083cc0-6ddd-41ff-a40a-7064e26a2abb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-07-24T02:16:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71083cc0-6ddd-41ff-a40a-7064e26a2abb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3a86b4d1-1fab-49d5-9546-bccd809aa33c","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T02:16:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"71083cc0-6ddd-41ff-a40a-7064e26a2abb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T02:16:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"71083cc0-6ddd-41ff-a40a-7064e26a2abb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a278089ef5ca4f891c0b28d14073a1a0c41e87b8894b2a26b46e663890ab51a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:16:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:16:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a278089ef5ca4f891c0b28d14073a1a0c41e87b8894b2a26b46e663890ab51a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a278089ef5ca4f891c0b28d14073a1a0c41e87b8894b2a26b46e663890ab51a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a278089ef5ca4f891c0b28d14073a1a0c41e87b8894b2a26b46e663890ab51a2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a278089ef5ca4f891c0b28d14073a1a0c41e87b8894b2a26b46e663890ab51a2"} {"level":"debug","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a278089ef5ca4f891c0b28d14073a1a0c41e87b8894b2a26b46e663890ab51a2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a278089ef5ca4f891c0b28d14073a1a0c41e87b8894b2a26b46e663890ab51a2"} {"level":"debug","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a278089ef5ca4f891c0b28d14073a1a0c41e87b8894b2a26b46e663890ab51a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:16:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:16:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a278089ef5ca4f891c0b28d14073a1a0c41e87b8894b2a26b46e663890ab51a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a278089ef5ca4f891c0b28d14073a1a0c41e87b8894b2a26b46e663890ab51a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a278089ef5ca4f891c0b28d14073a1a0c41e87b8894b2a26b46e663890ab51a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:16:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:16:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a278089ef5ca4f891c0b28d14073a1a0c41e87b8894b2a26b46e663890ab51a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2c1b9aa96a8fed741c328d23362ee6707888520ddf1928da8674993b488d326","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:16:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:16:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a278089ef5ca4f891c0b28d14073a1a0c41e87b8894b2a26b46e663890ab51a2"} {"level":"info","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2c1b9aa96a8fed741c328d23362ee6707888520ddf1928da8674993b488d326","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a278089ef5ca4f891c0b28d14073a1a0c41e87b8894b2a26b46e663890ab51a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:16:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:16:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a278089ef5ca4f891c0b28d14073a1a0c41e87b8894b2a26b46e663890ab51a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2c1b9aa96a8fed741c328d23362ee6707888520ddf1928da8674993b488d326"} {"level":"info","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a278089ef5ca4f891c0b28d14073a1a0c41e87b8894b2a26b46e663890ab51a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2c1b9aa96a8fed741c328d23362ee6707888520ddf1928da8674993b488d326","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:16:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:16:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a2c1b9aa96a8fed741c328d23362ee6707888520ddf1928da8674993b488d326"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2c1b9aa96a8fed741c328d23362ee6707888520ddf1928da8674993b488d326","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a278089ef5ca4f891c0b28d14073a1a0c41e87b8894b2a26b46e663890ab51a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:16:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:16:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a278089ef5ca4f891c0b28d14073a1a0c41e87b8894b2a26b46e663890ab51a2"} {"level":"info","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a278089ef5ca4f891c0b28d14073a1a0c41e87b8894b2a26b46e663890ab51a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2c1b9aa96a8fed741c328d23362ee6707888520ddf1928da8674993b488d326","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:16:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:16:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2c1b9aa96a8fed741c328d23362ee6707888520ddf1928da8674993b488d326"} {"level":"info","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2c1b9aa96a8fed741c328d23362ee6707888520ddf1928da8674993b488d326","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a278089ef5ca4f891c0b28d14073a1a0c41e87b8894b2a26b46e663890ab51a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2c1b9aa96a8fed741c328d23362ee6707888520ddf1928da8674993b488d326","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:16:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:16:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a2c1b9aa96a8fed741c328d23362ee6707888520ddf1928da8674993b488d326"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2c1b9aa96a8fed741c328d23362ee6707888520ddf1928da8674993b488d326","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a278089ef5ca4f891c0b28d14073a1a0c41e87b8894b2a26b46e663890ab51a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2c1b9aa96a8fed741c328d23362ee6707888520ddf1928da8674993b488d326","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:16:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:16:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a2c1b9aa96a8fed741c328d23362ee6707888520ddf1928da8674993b488d326"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a278089ef5ca4f891c0b28d14073a1a0c41e87b8894b2a26b46e663890ab51a2"} {"level":"error","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a2c1b9aa96a8fed741c328d23362ee6707888520ddf1928da8674993b488d326","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a2c1b9aa96a8fed741c328d23362ee6707888520ddf1928da8674993b488d326\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f689433ebc678aa54a86ce9b38c0b7db6b5c946270b5120207f2b2aa3b46a8bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:16:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:16:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f689433ebc678aa54a86ce9b38c0b7db6b5c946270b5120207f2b2aa3b46a8bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2c1b9aa96a8fed741c328d23362ee6707888520ddf1928da8674993b488d326","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:16:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:16:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2c1b9aa96a8fed741c328d23362ee6707888520ddf1928da8674993b488d326"} {"level":"info","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2c1b9aa96a8fed741c328d23362ee6707888520ddf1928da8674993b488d326","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a278089ef5ca4f891c0b28d14073a1a0c41e87b8894b2a26b46e663890ab51a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:16:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:16:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a278089ef5ca4f891c0b28d14073a1a0c41e87b8894b2a26b46e663890ab51a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f689433ebc678aa54a86ce9b38c0b7db6b5c946270b5120207f2b2aa3b46a8bd"} {"level":"info","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a278089ef5ca4f891c0b28d14073a1a0c41e87b8894b2a26b46e663890ab51a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f689433ebc678aa54a86ce9b38c0b7db6b5c946270b5120207f2b2aa3b46a8bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:16:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:16:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f689433ebc678aa54a86ce9b38c0b7db6b5c946270b5120207f2b2aa3b46a8bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f689433ebc678aa54a86ce9b38c0b7db6b5c946270b5120207f2b2aa3b46a8bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2c1b9aa96a8fed741c328d23362ee6707888520ddf1928da8674993b488d326","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a278089ef5ca4f891c0b28d14073a1a0c41e87b8894b2a26b46e663890ab51a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f689433ebc678aa54a86ce9b38c0b7db6b5c946270b5120207f2b2aa3b46a8bd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2c1b9aa96a8fed741c328d23362ee6707888520ddf1928da8674993b488d326"} {"level":"debug","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2c1b9aa96a8fed741c328d23362ee6707888520ddf1928da8674993b488d326","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:16:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:16:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a2c1b9aa96a8fed741c328d23362ee6707888520ddf1928da8674993b488d326"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a278089ef5ca4f891c0b28d14073a1a0c41e87b8894b2a26b46e663890ab51a2"} {"level":"info","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2c1b9aa96a8fed741c328d23362ee6707888520ddf1928da8674993b488d326","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2c1b9aa96a8fed741c328d23362ee6707888520ddf1928da8674993b488d326","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f689433ebc678aa54a86ce9b38c0b7db6b5c946270b5120207f2b2aa3b46a8bd"} {"level":"info","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2c1b9aa96a8fed741c328d23362ee6707888520ddf1928da8674993b488d326"} {"level":"debug","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9199880cc671d673e1ba5bdb04231d13599cec91381bbbb848dac80f6e40aeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:16:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:16:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9199880cc671d673e1ba5bdb04231d13599cec91381bbbb848dac80f6e40aeb"} {"level":"info","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9199880cc671d673e1ba5bdb04231d13599cec91381bbbb848dac80f6e40aeb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9199880cc671d673e1ba5bdb04231d13599cec91381bbbb848dac80f6e40aeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:16:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:16:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9199880cc671d673e1ba5bdb04231d13599cec91381bbbb848dac80f6e40aeb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9199880cc671d673e1ba5bdb04231d13599cec91381bbbb848dac80f6e40aeb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9199880cc671d673e1ba5bdb04231d13599cec91381bbbb848dac80f6e40aeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:16:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:16:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9199880cc671d673e1ba5bdb04231d13599cec91381bbbb848dac80f6e40aeb"} {"level":"error","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e9199880cc671d673e1ba5bdb04231d13599cec91381bbbb848dac80f6e40aeb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e9199880cc671d673e1ba5bdb04231d13599cec91381bbbb848dac80f6e40aeb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9199880cc671d673e1ba5bdb04231d13599cec91381bbbb848dac80f6e40aeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:16:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:16:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9199880cc671d673e1ba5bdb04231d13599cec91381bbbb848dac80f6e40aeb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9199880cc671d673e1ba5bdb04231d13599cec91381bbbb848dac80f6e40aeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:16:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:16:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9199880cc671d673e1ba5bdb04231d13599cec91381bbbb848dac80f6e40aeb"} {"level":"error","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e9199880cc671d673e1ba5bdb04231d13599cec91381bbbb848dac80f6e40aeb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e9199880cc671d673e1ba5bdb04231d13599cec91381bbbb848dac80f6e40aeb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9199880cc671d673e1ba5bdb04231d13599cec91381bbbb848dac80f6e40aeb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9199880cc671d673e1ba5bdb04231d13599cec91381bbbb848dac80f6e40aeb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9199880cc671d673e1ba5bdb04231d13599cec91381bbbb848dac80f6e40aeb"} {"level":"debug","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"959da5c9e087f50cc281487821ddba0245e0aa36aa9ff5a486993c39bf670946","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:16:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:16:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"959da5c9e087f50cc281487821ddba0245e0aa36aa9ff5a486993c39bf670946","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"959da5c9e087f50cc281487821ddba0245e0aa36aa9ff5a486993c39bf670946","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/959da5c9e087f50cc281487821ddba0245e0aa36aa9ff5a486993c39bf670946"} {"level":"debug","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"959da5c9e087f50cc281487821ddba0245e0aa36aa9ff5a486993c39bf670946","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/959da5c9e087f50cc281487821ddba0245e0aa36aa9ff5a486993c39bf670946"} {"level":"debug","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"959da5c9e087f50cc281487821ddba0245e0aa36aa9ff5a486993c39bf670946","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:16:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:16:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["959da5c9e087f50cc281487821ddba0245e0aa36aa9ff5a486993c39bf670946"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"959da5c9e087f50cc281487821ddba0245e0aa36aa9ff5a486993c39bf670946","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9199880cc671d673e1ba5bdb04231d13599cec91381bbbb848dac80f6e40aeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:16:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:16:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9199880cc671d673e1ba5bdb04231d13599cec91381bbbb848dac80f6e40aeb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9199880cc671d673e1ba5bdb04231d13599cec91381bbbb848dac80f6e40aeb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"959da5c9e087f50cc281487821ddba0245e0aa36aa9ff5a486993c39bf670946","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:16:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:16:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/959da5c9e087f50cc281487821ddba0245e0aa36aa9ff5a486993c39bf670946"} {"level":"info","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"959da5c9e087f50cc281487821ddba0245e0aa36aa9ff5a486993c39bf670946","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9199880cc671d673e1ba5bdb04231d13599cec91381bbbb848dac80f6e40aeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:16:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:16:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9199880cc671d673e1ba5bdb04231d13599cec91381bbbb848dac80f6e40aeb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"959da5c9e087f50cc281487821ddba0245e0aa36aa9ff5a486993c39bf670946","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:16:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:16:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["959da5c9e087f50cc281487821ddba0245e0aa36aa9ff5a486993c39bf670946"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9199880cc671d673e1ba5bdb04231d13599cec91381bbbb848dac80f6e40aeb"} {"level":"info","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"959da5c9e087f50cc281487821ddba0245e0aa36aa9ff5a486993c39bf670946","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9199880cc671d673e1ba5bdb04231d13599cec91381bbbb848dac80f6e40aeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:16:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:16:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9199880cc671d673e1ba5bdb04231d13599cec91381bbbb848dac80f6e40aeb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/959da5c9e087f50cc281487821ddba0245e0aa36aa9ff5a486993c39bf670946"} {"level":"info","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9199880cc671d673e1ba5bdb04231d13599cec91381bbbb848dac80f6e40aeb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b79094258c1a73fa53a49157e332f188c52cc1f97ec87f6fe08f117b310a8f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:16:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:16:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b79094258c1a73fa53a49157e332f188c52cc1f97ec87f6fe08f117b310a8f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"959da5c9e087f50cc281487821ddba0245e0aa36aa9ff5a486993c39bf670946","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9199880cc671d673e1ba5bdb04231d13599cec91381bbbb848dac80f6e40aeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:16:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:16:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9199880cc671d673e1ba5bdb04231d13599cec91381bbbb848dac80f6e40aeb"} {"level":"info","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9199880cc671d673e1ba5bdb04231d13599cec91381bbbb848dac80f6e40aeb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b79094258c1a73fa53a49157e332f188c52cc1f97ec87f6fe08f117b310a8f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:16:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:16:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b79094258c1a73fa53a49157e332f188c52cc1f97ec87f6fe08f117b310a8f6"} {"level":"info","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b79094258c1a73fa53a49157e332f188c52cc1f97ec87f6fe08f117b310a8f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9199880cc671d673e1ba5bdb04231d13599cec91381bbbb848dac80f6e40aeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:16:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:16:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9199880cc671d673e1ba5bdb04231d13599cec91381bbbb848dac80f6e40aeb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9199880cc671d673e1ba5bdb04231d13599cec91381bbbb848dac80f6e40aeb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b79094258c1a73fa53a49157e332f188c52cc1f97ec87f6fe08f117b310a8f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:16:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:16:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b79094258c1a73fa53a49157e332f188c52cc1f97ec87f6fe08f117b310a8f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/959da5c9e087f50cc281487821ddba0245e0aa36aa9ff5a486993c39bf670946"} {"level":"info","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b79094258c1a73fa53a49157e332f188c52cc1f97ec87f6fe08f117b310a8f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9199880cc671d673e1ba5bdb04231d13599cec91381bbbb848dac80f6e40aeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:16:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:16:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9199880cc671d673e1ba5bdb04231d13599cec91381bbbb848dac80f6e40aeb"} {"level":"info","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9199880cc671d673e1ba5bdb04231d13599cec91381bbbb848dac80f6e40aeb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b79094258c1a73fa53a49157e332f188c52cc1f97ec87f6fe08f117b310a8f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:16:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:16:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b79094258c1a73fa53a49157e332f188c52cc1f97ec87f6fe08f117b310a8f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9199880cc671d673e1ba5bdb04231d13599cec91381bbbb848dac80f6e40aeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:16:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:16:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9199880cc671d673e1ba5bdb04231d13599cec91381bbbb848dac80f6e40aeb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b79094258c1a73fa53a49157e332f188c52cc1f97ec87f6fe08f117b310a8f6"} {"level":"info","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9199880cc671d673e1ba5bdb04231d13599cec91381bbbb848dac80f6e40aeb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b79094258c1a73fa53a49157e332f188c52cc1f97ec87f6fe08f117b310a8f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:16:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:16:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b79094258c1a73fa53a49157e332f188c52cc1f97ec87f6fe08f117b310a8f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9199880cc671d673e1ba5bdb04231d13599cec91381bbbb848dac80f6e40aeb"} {"level":"info","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b79094258c1a73fa53a49157e332f188c52cc1f97ec87f6fe08f117b310a8f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9199880cc671d673e1ba5bdb04231d13599cec91381bbbb848dac80f6e40aeb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b79094258c1a73fa53a49157e332f188c52cc1f97ec87f6fe08f117b310a8f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:16:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:16:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b79094258c1a73fa53a49157e332f188c52cc1f97ec87f6fe08f117b310a8f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b79094258c1a73fa53a49157e332f188c52cc1f97ec87f6fe08f117b310a8f6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b79094258c1a73fa53a49157e332f188c52cc1f97ec87f6fe08f117b310a8f6"} {"level":"debug","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b79094258c1a73fa53a49157e332f188c52cc1f97ec87f6fe08f117b310a8f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:16:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:16:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b79094258c1a73fa53a49157e332f188c52cc1f97ec87f6fe08f117b310a8f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b79094258c1a73fa53a49157e332f188c52cc1f97ec87f6fe08f117b310a8f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b79094258c1a73fa53a49157e332f188c52cc1f97ec87f6fe08f117b310a8f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bac4f229193a7fc46187767d04349ea18fc0abcdab1f9c0423dc03550dc95e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:16:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:16:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9199880cc671d673e1ba5bdb04231d13599cec91381bbbb848dac80f6e40aeb"} {"level":"info","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bac4f229193a7fc46187767d04349ea18fc0abcdab1f9c0423dc03550dc95e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bac4f229193a7fc46187767d04349ea18fc0abcdab1f9c0423dc03550dc95e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bac4f229193a7fc46187767d04349ea18fc0abcdab1f9c0423dc03550dc95e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bac4f229193a7fc46187767d04349ea18fc0abcdab1f9c0423dc03550dc95e7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b79094258c1a73fa53a49157e332f188c52cc1f97ec87f6fe08f117b310a8f6"} {"level":"info","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bac4f229193a7fc46187767d04349ea18fc0abcdab1f9c0423dc03550dc95e7"} {"level":"debug","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bac4f229193a7fc46187767d04349ea18fc0abcdab1f9c0423dc03550dc95e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:16:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:16:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2bac4f229193a7fc46187767d04349ea18fc0abcdab1f9c0423dc03550dc95e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bac4f229193a7fc46187767d04349ea18fc0abcdab1f9c0423dc03550dc95e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bac4f229193a7fc46187767d04349ea18fc0abcdab1f9c0423dc03550dc95e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:16:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:16:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bac4f229193a7fc46187767d04349ea18fc0abcdab1f9c0423dc03550dc95e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"645fbeb3a61db3a72cc60305394f288052ee9b70dfb6a0c0ff1e615639d89edc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:16:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:16:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bac4f229193a7fc46187767d04349ea18fc0abcdab1f9c0423dc03550dc95e7"} {"level":"info","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"645fbeb3a61db3a72cc60305394f288052ee9b70dfb6a0c0ff1e615639d89edc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bac4f229193a7fc46187767d04349ea18fc0abcdab1f9c0423dc03550dc95e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:16:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:16:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2bac4f229193a7fc46187767d04349ea18fc0abcdab1f9c0423dc03550dc95e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bac4f229193a7fc46187767d04349ea18fc0abcdab1f9c0423dc03550dc95e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1700ad624c8783b7f03ce6e84ba409ac436e65ada1b612fd12621c944387274a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:16:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:16:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/645fbeb3a61db3a72cc60305394f288052ee9b70dfb6a0c0ff1e615639d89edc"} {"level":"info","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1700ad624c8783b7f03ce6e84ba409ac436e65ada1b612fd12621c944387274a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"645fbeb3a61db3a72cc60305394f288052ee9b70dfb6a0c0ff1e615639d89edc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:16:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:16:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["645fbeb3a61db3a72cc60305394f288052ee9b70dfb6a0c0ff1e615639d89edc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1700ad624c8783b7f03ce6e84ba409ac436e65ada1b612fd12621c944387274a"} {"level":"info","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"645fbeb3a61db3a72cc60305394f288052ee9b70dfb6a0c0ff1e615639d89edc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bac4f229193a7fc46187767d04349ea18fc0abcdab1f9c0423dc03550dc95e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:16:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:16:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bac4f229193a7fc46187767d04349ea18fc0abcdab1f9c0423dc03550dc95e7"} {"level":"info","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bac4f229193a7fc46187767d04349ea18fc0abcdab1f9c0423dc03550dc95e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1700ad624c8783b7f03ce6e84ba409ac436e65ada1b612fd12621c944387274a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:16:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:16:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1700ad624c8783b7f03ce6e84ba409ac436e65ada1b612fd12621c944387274a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1700ad624c8783b7f03ce6e84ba409ac436e65ada1b612fd12621c944387274a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"645fbeb3a61db3a72cc60305394f288052ee9b70dfb6a0c0ff1e615639d89edc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:16:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:16:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/645fbeb3a61db3a72cc60305394f288052ee9b70dfb6a0c0ff1e615639d89edc"} {"level":"info","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"645fbeb3a61db3a72cc60305394f288052ee9b70dfb6a0c0ff1e615639d89edc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bac4f229193a7fc46187767d04349ea18fc0abcdab1f9c0423dc03550dc95e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:16:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:16:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2bac4f229193a7fc46187767d04349ea18fc0abcdab1f9c0423dc03550dc95e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1700ad624c8783b7f03ce6e84ba409ac436e65ada1b612fd12621c944387274a"} {"level":"info","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bac4f229193a7fc46187767d04349ea18fc0abcdab1f9c0423dc03550dc95e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1700ad624c8783b7f03ce6e84ba409ac436e65ada1b612fd12621c944387274a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"645fbeb3a61db3a72cc60305394f288052ee9b70dfb6a0c0ff1e615639d89edc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:16:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:16:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["645fbeb3a61db3a72cc60305394f288052ee9b70dfb6a0c0ff1e615639d89edc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"645fbeb3a61db3a72cc60305394f288052ee9b70dfb6a0c0ff1e615639d89edc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bac4f229193a7fc46187767d04349ea18fc0abcdab1f9c0423dc03550dc95e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:16:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:16:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bac4f229193a7fc46187767d04349ea18fc0abcdab1f9c0423dc03550dc95e7"} {"level":"info","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bac4f229193a7fc46187767d04349ea18fc0abcdab1f9c0423dc03550dc95e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"645fbeb3a61db3a72cc60305394f288052ee9b70dfb6a0c0ff1e615639d89edc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:16:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:16:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/645fbeb3a61db3a72cc60305394f288052ee9b70dfb6a0c0ff1e615639d89edc"} {"level":"info","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"645fbeb3a61db3a72cc60305394f288052ee9b70dfb6a0c0ff1e615639d89edc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bac4f229193a7fc46187767d04349ea18fc0abcdab1f9c0423dc03550dc95e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"645fbeb3a61db3a72cc60305394f288052ee9b70dfb6a0c0ff1e615639d89edc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:16:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:16:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["645fbeb3a61db3a72cc60305394f288052ee9b70dfb6a0c0ff1e615639d89edc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bac4f229193a7fc46187767d04349ea18fc0abcdab1f9c0423dc03550dc95e7"} {"level":"info","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/645fbeb3a61db3a72cc60305394f288052ee9b70dfb6a0c0ff1e615639d89edc"} {"level":"info","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"645fbeb3a61db3a72cc60305394f288052ee9b70dfb6a0c0ff1e615639d89edc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bac4f229193a7fc46187767d04349ea18fc0abcdab1f9c0423dc03550dc95e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:16:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:16:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2bac4f229193a7fc46187767d04349ea18fc0abcdab1f9c0423dc03550dc95e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/059e91ee28b4df0e3ba6ab798eb061206cfa52cfb8be91f286b855176c93435d"} {"level":"info","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/645fbeb3a61db3a72cc60305394f288052ee9b70dfb6a0c0ff1e615639d89edc"} {"level":"info","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bac4f229193a7fc46187767d04349ea18fc0abcdab1f9c0423dc03550dc95e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"059e91ee28b4df0e3ba6ab798eb061206cfa52cfb8be91f286b855176c93435d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:16:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:16:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["059e91ee28b4df0e3ba6ab798eb061206cfa52cfb8be91f286b855176c93435d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2dcdcc80481532a5195a7ec4636ff252433ae2dd0878c4091166cde5b50dbcb6"} {"level":"info","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bac4f229193a7fc46187767d04349ea18fc0abcdab1f9c0423dc03550dc95e7"} {"level":"info","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"059e91ee28b4df0e3ba6ab798eb061206cfa52cfb8be91f286b855176c93435d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"645fbeb3a61db3a72cc60305394f288052ee9b70dfb6a0c0ff1e615639d89edc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2dcdcc80481532a5195a7ec4636ff252433ae2dd0878c4091166cde5b50dbcb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:16:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:16:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2dcdcc80481532a5195a7ec4636ff252433ae2dd0878c4091166cde5b50dbcb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a39c82467db8d9263b3bf41d3b7a74835d59be4300345235a72b9488c5f0cda8"} {"level":"info","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/059e91ee28b4df0e3ba6ab798eb061206cfa52cfb8be91f286b855176c93435d"} {"level":"info","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2dcdcc80481532a5195a7ec4636ff252433ae2dd0878c4091166cde5b50dbcb6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bac4f229193a7fc46187767d04349ea18fc0abcdab1f9c0423dc03550dc95e7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a39c82467db8d9263b3bf41d3b7a74835d59be4300345235a72b9488c5f0cda8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:16:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:16:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a39c82467db8d9263b3bf41d3b7a74835d59be4300345235a72b9488c5f0cda8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2dcdcc80481532a5195a7ec4636ff252433ae2dd0878c4091166cde5b50dbcb6"} {"level":"info","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a39c82467db8d9263b3bf41d3b7a74835d59be4300345235a72b9488c5f0cda8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"059e91ee28b4df0e3ba6ab798eb061206cfa52cfb8be91f286b855176c93435d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2dcdcc80481532a5195a7ec4636ff252433ae2dd0878c4091166cde5b50dbcb6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a39c82467db8d9263b3bf41d3b7a74835d59be4300345235a72b9488c5f0cda8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:16:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:16:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a39c82467db8d9263b3bf41d3b7a74835d59be4300345235a72b9488c5f0cda8"} {"level":"info","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a39c82467db8d9263b3bf41d3b7a74835d59be4300345235a72b9488c5f0cda8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a39c82467db8d9263b3bf41d3b7a74835d59be4300345235a72b9488c5f0cda8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a39c82467db8d9263b3bf41d3b7a74835d59be4300345235a72b9488c5f0cda8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a39c82467db8d9263b3bf41d3b7a74835d59be4300345235a72b9488c5f0cda8"} {"level":"debug","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a39c82467db8d9263b3bf41d3b7a74835d59be4300345235a72b9488c5f0cda8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:16:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:16:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a39c82467db8d9263b3bf41d3b7a74835d59be4300345235a72b9488c5f0cda8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a39c82467db8d9263b3bf41d3b7a74835d59be4300345235a72b9488c5f0cda8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a39c82467db8d9263b3bf41d3b7a74835d59be4300345235a72b9488c5f0cda8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:16:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:16:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a39c82467db8d9263b3bf41d3b7a74835d59be4300345235a72b9488c5f0cda8"} {"level":"info","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a39c82467db8d9263b3bf41d3b7a74835d59be4300345235a72b9488c5f0cda8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a39c82467db8d9263b3bf41d3b7a74835d59be4300345235a72b9488c5f0cda8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a39c82467db8d9263b3bf41d3b7a74835d59be4300345235a72b9488c5f0cda8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a39c82467db8d9263b3bf41d3b7a74835d59be4300345235a72b9488c5f0cda8"} {"level":"debug","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a39c82467db8d9263b3bf41d3b7a74835d59be4300345235a72b9488c5f0cda8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:16:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:16:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a39c82467db8d9263b3bf41d3b7a74835d59be4300345235a72b9488c5f0cda8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a39c82467db8d9263b3bf41d3b7a74835d59be4300345235a72b9488c5f0cda8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a39c82467db8d9263b3bf41d3b7a74835d59be4300345235a72b9488c5f0cda8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:16:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:16:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a39c82467db8d9263b3bf41d3b7a74835d59be4300345235a72b9488c5f0cda8"} {"level":"info","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a39c82467db8d9263b3bf41d3b7a74835d59be4300345235a72b9488c5f0cda8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a39c82467db8d9263b3bf41d3b7a74835d59be4300345235a72b9488c5f0cda8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a39c82467db8d9263b3bf41d3b7a74835d59be4300345235a72b9488c5f0cda8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a39c82467db8d9263b3bf41d3b7a74835d59be4300345235a72b9488c5f0cda8"} {"level":"debug","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a39c82467db8d9263b3bf41d3b7a74835d59be4300345235a72b9488c5f0cda8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:16:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:16:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a39c82467db8d9263b3bf41d3b7a74835d59be4300345235a72b9488c5f0cda8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a39c82467db8d9263b3bf41d3b7a74835d59be4300345235a72b9488c5f0cda8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a39c82467db8d9263b3bf41d3b7a74835d59be4300345235a72b9488c5f0cda8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T02:16:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T02:16:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a39c82467db8d9263b3bf41d3b7a74835d59be4300345235a72b9488c5f0cda8"} {"level":"info","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a39c82467db8d9263b3bf41d3b7a74835d59be4300345235a72b9488c5f0cda8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a39c82467db8d9263b3bf41d3b7a74835d59be4300345235a72b9488c5f0cda8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a39c82467db8d9263b3bf41d3b7a74835d59be4300345235a72b9488c5f0cda8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a39c82467db8d9263b3bf41d3b7a74835d59be4300345235a72b9488c5f0cda8"} {"level":"debug","ts":"2026-07-24T02:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a39c82467db8d9263b3bf41d3b7a74835d59be4300345235a72b9488c5f0cda8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T02:16:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T02:16:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a39c82467db8d9263b3bf41d3b7a74835d59be4300345235a72b9488c5f0cda8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T02:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a39c82467db8d9263b3bf41d3b7a74835d59be4300345235a72b9488c5f0cda8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T02:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a39c82467db8d9263b3bf41d3b7a74835d59be4300345235a72b9488c5f0cda8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T02:16:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a39c82467db8d9263b3bf41d3b7a74835d59be4300345235a72b9488c5f0cda8"} {"level":"info","ts":"2026-07-24T02:16:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f02c0a1d-e724-4410-9296-d7998de3cf42","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:52130","PortSpecifier":{"PortValue":52130}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f02c0a1d-e724-4410-9296-d7998de3cf42","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-a002f7.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T02:16:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f02c0a1d-e724-4410-9296-d7998de3cf42","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:52130","PortSpecifier":{"PortValue":52130}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784859413,"nanos":461960348},"http":{"id":"f02c0a1d-e724-4410-9296-d7998de3cf42","method":"POST","headers":{":authority":"e2e-ipp-a-a002f7.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T02:16:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f02c0a1d-e724-4410-9296-d7998de3cf42","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T02:16:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f02c0a1d-e724-4410-9296-d7998de3cf42","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f29f66c2-a19e-4465-a7c7-78c9c558bf70","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=418f119d-8728-4d81-ae00-6c04fed31bc9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/28c99b380518"]}} {"level":"debug","ts":"2026-07-24T02:16:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f02c0a1d-e724-4410-9296-d7998de3cf42","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/28c99b380518"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=418f119d-8728-4d81-ae00-6c04fed31bc9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f29f66c2-a19e-4465-a7c7-78c9c558bf70","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"645fbeb3a61db3a72cc60305394f288052ee9b70dfb6a0c0ff1e615639d89edc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-a002f7.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T02:16:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f02c0a1d-e724-4410-9296-d7998de3cf42","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:16:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f02c0a1d-e724-4410-9296-d7998de3cf42","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:16:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f02c0a1d-e724-4410-9296-d7998de3cf42","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-a002f7/ipp-route-a002f7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-a002f7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:16:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f02c0a1d-e724-4410-9296-d7998de3cf42","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T02:16:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f02c0a1d-e724-4410-9296-d7998de3cf42","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T02:16:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f02c0a1d-e724-4410-9296-d7998de3cf42","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T02:16:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f02c0a1d-e724-4410-9296-d7998de3cf42","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T02:16:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f02c0a1d-e724-4410-9296-d7998de3cf42","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T02:16:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"882b4448-f1cd-4e9d-8a9c-6086b585a779","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:52140","PortSpecifier":{"PortValue":52140}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"882b4448-f1cd-4e9d-8a9c-6086b585a779","method":"POST","path":"/ai-tenant-e2e-ipp-a-a002f7/ipp-route-a002f7/v1/chat/completions","host":"e2e-ipp-a-a002f7.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T02:16:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"882b4448-f1cd-4e9d-8a9c-6086b585a779","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:52140","PortSpecifier":{"PortValue":52140}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784859415,"nanos":524462162},"http":{"id":"882b4448-f1cd-4e9d-8a9c-6086b585a779","method":"POST","headers":{":authority":"e2e-ipp-a-a002f7.apps.3cc369e0-6f69-4650-90d5-28c99b380518.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-a002f7/ipp-route-a002f7/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T02:16:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"882b4448-f1cd-4e9d-8a9c-6086b585a779","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-gNwPS8bF3AtaDdNH_hFzKpuxARgkGRXh8HEKM457gpQVs0zW0uVbffoQYVh6"} {"level":"debug","ts":"2026-07-24T02:16:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"882b4448-f1cd-4e9d-8a9c-6086b585a779","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-a002f7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-gNwPS8bF3AtaDdNH_hFzKpuxARgkGRXh8HEKM457gpQVs0zW0uVbffoQYVh6\"}"} {"level":"debug","ts":"2026-07-24T02:16:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"882b4448-f1cd-4e9d-8a9c-6086b585a779","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-a002f7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ef0921b6-87b0-4e51-9c62-dfad0eb60806","keyName":"e2e-ipp-a002f7","subscription":"ipp-route-a002f7-sub","tenant":"e2e-ipp-a-a002f7","userId":"ef0921b6-87b0-4e51-9c62-dfad0eb60806","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T02:16:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"882b4448-f1cd-4e9d-8a9c-6086b585a779","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-a002f7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-ipp-a-a002f7/ipp-route-a002f7\",\"requestedSubscription\":\"ipp-route-a002f7-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T02:16:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"882b4448-f1cd-4e9d-8a9c-6086b585a779","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-a002f7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"ipp-route-a002f7","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-a002f7-sub","namespace":"ai-tenant-e2e-ipp-a-a002f7","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-a002f7/ipp-route-a002f7"}} {"level":"debug","ts":"2026-07-24T02:16:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"882b4448-f1cd-4e9d-8a9c-6086b585a779","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T02:16:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"882b4448-f1cd-4e9d-8a9c-6086b585a779","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:16:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"882b4448-f1cd-4e9d-8a9c-6086b585a779","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:16:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"882b4448-f1cd-4e9d-8a9c-6086b585a779","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:16:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"882b4448-f1cd-4e9d-8a9c-6086b585a779","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-a002f7/ipp-route-a002f7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-a002f7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T02:16:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"882b4448-f1cd-4e9d-8a9c-6086b585a779","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T02:16:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"882b4448-f1cd-4e9d-8a9c-6086b585a779","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-a002f7-sub"} {"level":"debug","ts":"2026-07-24T02:16:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"882b4448-f1cd-4e9d-8a9c-6086b585a779","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T02:16:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"882b4448-f1cd-4e9d-8a9c-6086b585a779","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ef0921b6-87b0-4e51-9c62-dfad0eb60806","keyName":"e2e-ipp-a002f7","selected_subscription":"ipp-route-a002f7-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-a002f7/ipp-route-a002f7-sub@ai-tenant-e2e-ipp-a-a002f7/ipp-route-a002f7","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"ipp-route-a002f7","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-a002f7-sub","namespace":"ai-tenant-e2e-ipp-a-a002f7","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-a002f7/ipp-route-a002f7"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T02:16:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"882b4448-f1cd-4e9d-8a9c-6086b585a779","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T02:16:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"882b4448-f1cd-4e9d-8a9c-6086b585a779","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T02:18:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e9199880cc671d673e1ba5bdb04231d13599cec91381bbbb848dac80f6e40aeb"} {"level":"info","ts":"2026-07-24T02:18:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1700ad624c8783b7f03ce6e84ba409ac436e65ada1b612fd12621c944387274a"} {"level":"info","ts":"2026-07-24T02:18:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0b79094258c1a73fa53a49157e332f188c52cc1f97ec87f6fe08f117b310a8f6"} {"level":"info","ts":"2026-07-24T02:18:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/645fbeb3a61db3a72cc60305394f288052ee9b70dfb6a0c0ff1e615639d89edc"} {"level":"info","ts":"2026-07-24T02:18:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a39c82467db8d9263b3bf41d3b7a74835d59be4300345235a72b9488c5f0cda8"} {"level":"info","ts":"2026-07-24T02:18:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/959da5c9e087f50cc281487821ddba0245e0aa36aa9ff5a486993c39bf670946"} {"level":"info","ts":"2026-07-24T02:18:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f689433ebc678aa54a86ce9b38c0b7db6b5c946270b5120207f2b2aa3b46a8bd"} {"level":"info","ts":"2026-07-24T02:18:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2bac4f229193a7fc46187767d04349ea18fc0abcdab1f9c0423dc03550dc95e7"} {"level":"info","ts":"2026-07-24T02:18:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2dcdcc80481532a5195a7ec4636ff252433ae2dd0878c4091166cde5b50dbcb6"} {"level":"info","ts":"2026-07-24T02:18:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a2c1b9aa96a8fed741c328d23362ee6707888520ddf1928da8674993b488d326"} {"level":"info","ts":"2026-07-24T02:18:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a278089ef5ca4f891c0b28d14073a1a0c41e87b8894b2a26b46e663890ab51a2"} {"level":"info","ts":"2026-07-24T02:18:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/059e91ee28b4df0e3ba6ab798eb061206cfa52cfb8be91f286b855176c93435d"}