--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"info","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:39:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:39:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fd9d8e21137a7d1d77273cd3c60f9b6b443a71e62c483bf6e4d1b98cb2f33bb"} {"level":"info","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fd9d8e21137a7d1d77273cd3c60f9b6b443a71e62c483bf6e4d1b98cb2f33bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:39:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:39:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3"} {"level":"info","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:39:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:39:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:39:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:39:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3"} {"level":"info","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:39:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:39:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:39:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:39:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fd9d8e21137a7d1d77273cd3c60f9b6b443a71e62c483bf6e4d1b98cb2f33bb"} {"level":"info","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:39:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:39:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3"} {"level":"info","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:39:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:39:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d"} {"level":"info","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:39:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:39:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3"} {"level":"info","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:39:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:39:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:39:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:39:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3"} {"level":"info","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:39:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:39:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d"} {"level":"info","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:39:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:39:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:39:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:39:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3"} {"level":"info","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:39:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:39:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3"} {"level":"debug","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:39:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:39:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861"} {"level":"info","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:39:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:39:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3"} {"level":"info","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:39:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:39:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861"} {"level":"info","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:39:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:39:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861"} {"level":"debug","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861"} {"level":"debug","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:39:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:39:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50f03861a0e36fdf5083da7dd069cb97dfdcdcd74e365a9471ba230aad82962c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:39:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:39:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50f03861a0e36fdf5083da7dd069cb97dfdcdcd74e365a9471ba230aad82962c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50f03861a0e36fdf5083da7dd069cb97dfdcdcd74e365a9471ba230aad82962c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50f03861a0e36fdf5083da7dd069cb97dfdcdcd74e365a9471ba230aad82962c"} {"level":"debug","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50f03861a0e36fdf5083da7dd069cb97dfdcdcd74e365a9471ba230aad82962c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:39:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:39:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50f03861a0e36fdf5083da7dd069cb97dfdcdcd74e365a9471ba230aad82962c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50f03861a0e36fdf5083da7dd069cb97dfdcdcd74e365a9471ba230aad82962c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50f03861a0e36fdf5083da7dd069cb97dfdcdcd74e365a9471ba230aad82962c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861"} {"level":"info","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50f03861a0e36fdf5083da7dd069cb97dfdcdcd74e365a9471ba230aad82962c"} {"level":"debug","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:39:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:39:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126"} {"level":"debug","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126"} {"level":"debug","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:39:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:39:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126"} {"level":"debug","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:39:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:39:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:39:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:39:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31"} {"level":"info","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:39:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:39:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96"} {"level":"info","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31"} {"level":"info","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:39:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:39:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96"} {"level":"info","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31"} {"level":"info","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22ddf5e057c7c651458758b2cb4987ed2f31e6cb3574bd42590411a746d1e6a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:39:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:39:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22ddf5e057c7c651458758b2cb4987ed2f31e6cb3574bd42590411a746d1e6a3"} {"level":"info","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/465ed9a0789eb83abaeac26b458127409a7f7d61a976d675e70b7b772212070e"} {"level":"info","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22ddf5e057c7c651458758b2cb4987ed2f31e6cb3574bd42590411a746d1e6a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"465ed9a0789eb83abaeac26b458127409a7f7d61a976d675e70b7b772212070e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:39:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:39:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["465ed9a0789eb83abaeac26b458127409a7f7d61a976d675e70b7b772212070e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96"} {"level":"info","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d86238d7eec08524b6fd488df3171094cc9f362c1191dba8c3b909865376021"} {"level":"info","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22ddf5e057c7c651458758b2cb4987ed2f31e6cb3574bd42590411a746d1e6a3"} {"level":"info","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"465ed9a0789eb83abaeac26b458127409a7f7d61a976d675e70b7b772212070e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:39:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:39:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/465ed9a0789eb83abaeac26b458127409a7f7d61a976d675e70b7b772212070e"} {"level":"info","ts":"2026-07-17T14:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d86238d7eec08524b6fd488df3171094cc9f362c1191dba8c3b909865376021","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:39:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:39:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d86238d7eec08524b6fd488df3171094cc9f362c1191dba8c3b909865376021"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96"} {"level":"info","ts":"2026-07-17T14:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d86238d7eec08524b6fd488df3171094cc9f362c1191dba8c3b909865376021","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22ddf5e057c7c651458758b2cb4987ed2f31e6cb3574bd42590411a746d1e6a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:39:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:39:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22ddf5e057c7c651458758b2cb4987ed2f31e6cb3574bd42590411a746d1e6a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d86238d7eec08524b6fd488df3171094cc9f362c1191dba8c3b909865376021"} {"level":"info","ts":"2026-07-17T14:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22ddf5e057c7c651458758b2cb4987ed2f31e6cb3574bd42590411a746d1e6a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"465ed9a0789eb83abaeac26b458127409a7f7d61a976d675e70b7b772212070e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d86238d7eec08524b6fd488df3171094cc9f362c1191dba8c3b909865376021","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22ddf5e057c7c651458758b2cb4987ed2f31e6cb3574bd42590411a746d1e6a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:39:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:39:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22ddf5e057c7c651458758b2cb4987ed2f31e6cb3574bd42590411a746d1e6a3"} {"level":"info","ts":"2026-07-17T14:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22ddf5e057c7c651458758b2cb4987ed2f31e6cb3574bd42590411a746d1e6a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22ddf5e057c7c651458758b2cb4987ed2f31e6cb3574bd42590411a746d1e6a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22ddf5e057c7c651458758b2cb4987ed2f31e6cb3574bd42590411a746d1e6a3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22ddf5e057c7c651458758b2cb4987ed2f31e6cb3574bd42590411a746d1e6a3"} {"level":"debug","ts":"2026-07-17T14:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22ddf5e057c7c651458758b2cb4987ed2f31e6cb3574bd42590411a746d1e6a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:39:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:39:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22ddf5e057c7c651458758b2cb4987ed2f31e6cb3574bd42590411a746d1e6a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22ddf5e057c7c651458758b2cb4987ed2f31e6cb3574bd42590411a746d1e6a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22ddf5e057c7c651458758b2cb4987ed2f31e6cb3574bd42590411a746d1e6a3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:39:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22ddf5e057c7c651458758b2cb4987ed2f31e6cb3574bd42590411a746d1e6a3"} {"level":"info","ts":"2026-07-17T14:39:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"251f3c0a-1e69-4fcd-b420-ab58ef0d0510","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:50470","PortSpecifier":{"PortValue":50470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.101:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"251f3c0a-1e69-4fcd-b420-ab58ef0d0510","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-244a73.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T14:39:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"251f3c0a-1e69-4fcd-b420-ab58ef0d0510","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:50470","PortSpecifier":{"PortValue":50470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.101:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784299195,"nanos":218567241},"http":{"id":"251f3c0a-1e69-4fcd-b420-ab58ef0d0510","method":"POST","headers":{":authority":"e2e-shared-a-244a73.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T14:39:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"251f3c0a-1e69-4fcd-b420-ab58ef0d0510","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T14:39:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"251f3c0a-1e69-4fcd-b420-ab58ef0d0510","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"de491402-0b93-4648-a022-505c097cd610","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e645c696-460f-41b3-b391-2e55602b163a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c3765a88c95"]}} {"level":"debug","ts":"2026-07-17T14:39:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"251f3c0a-1e69-4fcd-b420-ab58ef0d0510","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c3765a88c95"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e645c696-460f-41b3-b391-2e55602b163a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de491402-0b93-4648-a022-505c097cd610","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b9a9673d41f2de079fe25aeb77889a2054753385a477ec9d8c0e96179d8f04c5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.101:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-244a73.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T14:39:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"251f3c0a-1e69-4fcd-b420-ab58ef0d0510","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:39:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"251f3c0a-1e69-4fcd-b420-ab58ef0d0510","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:39:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"251f3c0a-1e69-4fcd-b420-ab58ef0d0510","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-244a73/auth-test-model-244a73\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-244a73/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:39:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"251f3c0a-1e69-4fcd-b420-ab58ef0d0510","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T14:39:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"251f3c0a-1e69-4fcd-b420-ab58ef0d0510","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T14:39:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"251f3c0a-1e69-4fcd-b420-ab58ef0d0510","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T14:39:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"251f3c0a-1e69-4fcd-b420-ab58ef0d0510","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T14:39:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"251f3c0a-1e69-4fcd-b420-ab58ef0d0510","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T14:39:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9d614d3d-f2dd-4dc3-b33c-9c1db7f84f50","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:47818","PortSpecifier":{"PortValue":47818}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.102:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9d614d3d-f2dd-4dc3-b33c-9c1db7f84f50","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-9eb655.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T14:39:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9d614d3d-f2dd-4dc3-b33c-9c1db7f84f50","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:47818","PortSpecifier":{"PortValue":47818}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.102:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784299195,"nanos":261952737},"http":{"id":"9d614d3d-f2dd-4dc3-b33c-9c1db7f84f50","method":"POST","headers":{":authority":"e2e-shared-b-9eb655.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T14:39:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9d614d3d-f2dd-4dc3-b33c-9c1db7f84f50","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T14:39:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9d614d3d-f2dd-4dc3-b33c-9c1db7f84f50","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"de491402-0b93-4648-a022-505c097cd610","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e645c696-460f-41b3-b391-2e55602b163a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c3765a88c95"]}} {"level":"debug","ts":"2026-07-17T14:39:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9d614d3d-f2dd-4dc3-b33c-9c1db7f84f50","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c3765a88c95"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e645c696-460f-41b3-b391-2e55602b163a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de491402-0b93-4648-a022-505c097cd610","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.102:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-9eb655.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T14:39:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9d614d3d-f2dd-4dc3-b33c-9c1db7f84f50","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:39:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9d614d3d-f2dd-4dc3-b33c-9c1db7f84f50","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:39:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9d614d3d-f2dd-4dc3-b33c-9c1db7f84f50","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-9eb655/auth-test-model-9eb655\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-9eb655/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:39:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9d614d3d-f2dd-4dc3-b33c-9c1db7f84f50","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T14:39:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9d614d3d-f2dd-4dc3-b33c-9c1db7f84f50","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T14:39:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9d614d3d-f2dd-4dc3-b33c-9c1db7f84f50","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-17T14:39:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9d614d3d-f2dd-4dc3-b33c-9c1db7f84f50","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T14:39:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9d614d3d-f2dd-4dc3-b33c-9c1db7f84f50","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T14:39:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"75827cdf-6058-4dfc-aef4-5291f1eef6f5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:47820","PortSpecifier":{"PortValue":47820}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.102:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"75827cdf-6058-4dfc-aef4-5291f1eef6f5","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-9eb655.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T14:39:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"75827cdf-6058-4dfc-aef4-5291f1eef6f5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:47820","PortSpecifier":{"PortValue":47820}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.102:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784299195,"nanos":302313830},"http":{"id":"75827cdf-6058-4dfc-aef4-5291f1eef6f5","method":"GET","headers":{":authority":"e2e-shared-b-9eb655.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T14:39:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"75827cdf-6058-4dfc-aef4-5291f1eef6f5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-wGlL9Gf6lzUMFzQi_YxO4hGNVESNmpLqhlkRuTkRuIPfP1ivTq4LNj0vs7mx"} {"level":"debug","ts":"2026-07-17T14:39:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"75827cdf-6058-4dfc-aef4-5291f1eef6f5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-9eb655.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-wGlL9Gf6lzUMFzQi_YxO4hGNVESNmpLqhlkRuTkRuIPfP1ivTq4LNj0vs7mx\"}"} {"level":"debug","ts":"2026-07-17T14:39:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"75827cdf-6058-4dfc-aef4-5291f1eef6f5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-9eb655.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-17T14:39:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"75827cdf-6058-4dfc-aef4-5291f1eef6f5","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.102:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-9eb655.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T14:39:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75827cdf-6058-4dfc-aef4-5291f1eef6f5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:39:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"75827cdf-6058-4dfc-aef4-5291f1eef6f5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-17T14:39:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"75827cdf-6058-4dfc-aef4-5291f1eef6f5","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-17T14:39:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"75827cdf-6058-4dfc-aef4-5291f1eef6f5","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-07-17T14:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31"} {"level":"info","ts":"2026-07-17T14:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861"} {"level":"info","ts":"2026-07-17T14:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96"} {"level":"info","ts":"2026-07-17T14:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6fd9d8e21137a7d1d77273cd3c60f9b6b443a71e62c483bf6e4d1b98cb2f33bb"} {"level":"info","ts":"2026-07-17T14:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126"} {"level":"info","ts":"2026-07-17T14:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/22ddf5e057c7c651458758b2cb4987ed2f31e6cb3574bd42590411a746d1e6a3"} {"level":"info","ts":"2026-07-17T14:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3"} {"level":"info","ts":"2026-07-17T14:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/50f03861a0e36fdf5083da7dd069cb97dfdcdcd74e365a9471ba230aad82962c"} {"level":"info","ts":"2026-07-17T14:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d"} {"level":"info","ts":"2026-07-17T14:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/465ed9a0789eb83abaeac26b458127409a7f7d61a976d675e70b7b772212070e"} {"level":"info","ts":"2026-07-17T14:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1d86238d7eec08524b6fd488df3171094cc9f362c1191dba8c3b909865376021"} {"level":"info","ts":"2026-07-17T14:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3"} {"level":"debug","ts":"2026-07-17T14:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22ddf5e057c7c651458758b2cb4987ed2f31e6cb3574bd42590411a746d1e6a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22ddf5e057c7c651458758b2cb4987ed2f31e6cb3574bd42590411a746d1e6a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22ddf5e057c7c651458758b2cb4987ed2f31e6cb3574bd42590411a746d1e6a3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22ddf5e057c7c651458758b2cb4987ed2f31e6cb3574bd42590411a746d1e6a3"} {"level":"debug","ts":"2026-07-17T14:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22ddf5e057c7c651458758b2cb4987ed2f31e6cb3574bd42590411a746d1e6a3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22ddf5e057c7c651458758b2cb4987ed2f31e6cb3574bd42590411a746d1e6a3"} {"level":"debug","ts":"2026-07-17T14:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22ddf5e057c7c651458758b2cb4987ed2f31e6cb3574bd42590411a746d1e6a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22ddf5e057c7c651458758b2cb4987ed2f31e6cb3574bd42590411a746d1e6a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22ddf5e057c7c651458758b2cb4987ed2f31e6cb3574bd42590411a746d1e6a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22ddf5e057c7c651458758b2cb4987ed2f31e6cb3574bd42590411a746d1e6a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22ddf5e057c7c651458758b2cb4987ed2f31e6cb3574bd42590411a746d1e6a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22ddf5e057c7c651458758b2cb4987ed2f31e6cb3574bd42590411a746d1e6a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22ddf5e057c7c651458758b2cb4987ed2f31e6cb3574bd42590411a746d1e6a3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22ddf5e057c7c651458758b2cb4987ed2f31e6cb3574bd42590411a746d1e6a3"} {"level":"debug","ts":"2026-07-17T14:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22ddf5e057c7c651458758b2cb4987ed2f31e6cb3574bd42590411a746d1e6a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22ddf5e057c7c651458758b2cb4987ed2f31e6cb3574bd42590411a746d1e6a3"} {"level":"info","ts":"2026-07-17T14:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fd9d8e21137a7d1d77273cd3c60f9b6b443a71e62c483bf6e4d1b98cb2f33bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96"} {"level":"info","ts":"2026-07-17T14:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fd9d8e21137a7d1d77273cd3c60f9b6b443a71e62c483bf6e4d1b98cb2f33bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fd9d8e21137a7d1d77273cd3c60f9b6b443a71e62c483bf6e4d1b98cb2f33bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fd9d8e21137a7d1d77273cd3c60f9b6b443a71e62c483bf6e4d1b98cb2f33bb"} {"level":"info","ts":"2026-07-17T14:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fd9d8e21137a7d1d77273cd3c60f9b6b443a71e62c483bf6e4d1b98cb2f33bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22ddf5e057c7c651458758b2cb4987ed2f31e6cb3574bd42590411a746d1e6a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22ddf5e057c7c651458758b2cb4987ed2f31e6cb3574bd42590411a746d1e6a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96"} {"level":"info","ts":"2026-07-17T14:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22ddf5e057c7c651458758b2cb4987ed2f31e6cb3574bd42590411a746d1e6a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fd9d8e21137a7d1d77273cd3c60f9b6b443a71e62c483bf6e4d1b98cb2f33bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22ddf5e057c7c651458758b2cb4987ed2f31e6cb3574bd42590411a746d1e6a3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fd9d8e21137a7d1d77273cd3c60f9b6b443a71e62c483bf6e4d1b98cb2f33bb"} {"level":"debug","ts":"2026-07-17T14:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fd9d8e21137a7d1d77273cd3c60f9b6b443a71e62c483bf6e4d1b98cb2f33bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6fd9d8e21137a7d1d77273cd3c60f9b6b443a71e62c483bf6e4d1b98cb2f33bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fd9d8e21137a7d1d77273cd3c60f9b6b443a71e62c483bf6e4d1b98cb2f33bb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22ddf5e057c7c651458758b2cb4987ed2f31e6cb3574bd42590411a746d1e6a3"} {"level":"debug","ts":"2026-07-17T14:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fd9d8e21137a7d1d77273cd3c60f9b6b443a71e62c483bf6e4d1b98cb2f33bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fd9d8e21137a7d1d77273cd3c60f9b6b443a71e62c483bf6e4d1b98cb2f33bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fd9d8e21137a7d1d77273cd3c60f9b6b443a71e62c483bf6e4d1b98cb2f33bb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fd9d8e21137a7d1d77273cd3c60f9b6b443a71e62c483bf6e4d1b98cb2f33bb"} {"level":"debug","ts":"2026-07-17T14:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fd9d8e21137a7d1d77273cd3c60f9b6b443a71e62c483bf6e4d1b98cb2f33bb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fd9d8e21137a7d1d77273cd3c60f9b6b443a71e62c483bf6e4d1b98cb2f33bb"} {"level":"debug","ts":"2026-07-17T14:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fd9d8e21137a7d1d77273cd3c60f9b6b443a71e62c483bf6e4d1b98cb2f33bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fd9d8e21137a7d1d77273cd3c60f9b6b443a71e62c483bf6e4d1b98cb2f33bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6fd9d8e21137a7d1d77273cd3c60f9b6b443a71e62c483bf6e4d1b98cb2f33bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fd9d8e21137a7d1d77273cd3c60f9b6b443a71e62c483bf6e4d1b98cb2f33bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fd9d8e21137a7d1d77273cd3c60f9b6b443a71e62c483bf6e4d1b98cb2f33bb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3"} {"level":"debug","ts":"2026-07-17T14:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fd9d8e21137a7d1d77273cd3c60f9b6b443a71e62c483bf6e4d1b98cb2f33bb"} {"level":"debug","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3"} {"level":"debug","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d86238d7eec08524b6fd488df3171094cc9f362c1191dba8c3b909865376021","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3"} {"level":"info","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d86238d7eec08524b6fd488df3171094cc9f362c1191dba8c3b909865376021","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d86238d7eec08524b6fd488df3171094cc9f362c1191dba8c3b909865376021"} {"level":"info","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d86238d7eec08524b6fd488df3171094cc9f362c1191dba8c3b909865376021","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d86238d7eec08524b6fd488df3171094cc9f362c1191dba8c3b909865376021"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3"} {"level":"info","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d86238d7eec08524b6fd488df3171094cc9f362c1191dba8c3b909865376021","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d86238d7eec08524b6fd488df3171094cc9f362c1191dba8c3b909865376021","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d"} {"level":"debug","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d86238d7eec08524b6fd488df3171094cc9f362c1191dba8c3b909865376021"} {"level":"error","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"465ed9a0789eb83abaeac26b458127409a7f7d61a976d675e70b7b772212070e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d"} {"level":"info","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/465ed9a0789eb83abaeac26b458127409a7f7d61a976d675e70b7b772212070e"} {"level":"info","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"465ed9a0789eb83abaeac26b458127409a7f7d61a976d675e70b7b772212070e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d"} {"level":"info","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"465ed9a0789eb83abaeac26b458127409a7f7d61a976d675e70b7b772212070e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["465ed9a0789eb83abaeac26b458127409a7f7d61a976d675e70b7b772212070e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126"} {"level":"info","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"465ed9a0789eb83abaeac26b458127409a7f7d61a976d675e70b7b772212070e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/465ed9a0789eb83abaeac26b458127409a7f7d61a976d675e70b7b772212070e"} {"level":"info","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3"} {"level":"info","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126"} {"level":"info","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861"} {"level":"info","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"465ed9a0789eb83abaeac26b458127409a7f7d61a976d675e70b7b772212070e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/465ed9a0789eb83abaeac26b458127409a7f7d61a976d675e70b7b772212070e"} {"level":"info","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"465ed9a0789eb83abaeac26b458127409a7f7d61a976d675e70b7b772212070e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50f03861a0e36fdf5083da7dd069cb97dfdcdcd74e365a9471ba230aad82962c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50f03861a0e36fdf5083da7dd069cb97dfdcdcd74e365a9471ba230aad82962c"} {"level":"info","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50f03861a0e36fdf5083da7dd069cb97dfdcdcd74e365a9471ba230aad82962c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3"} {"level":"info","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d"} {"level":"debug","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"465ed9a0789eb83abaeac26b458127409a7f7d61a976d675e70b7b772212070e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["465ed9a0789eb83abaeac26b458127409a7f7d61a976d675e70b7b772212070e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"465ed9a0789eb83abaeac26b458127409a7f7d61a976d675e70b7b772212070e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50f03861a0e36fdf5083da7dd069cb97dfdcdcd74e365a9471ba230aad82962c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50f03861a0e36fdf5083da7dd069cb97dfdcdcd74e365a9471ba230aad82962c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126"} {"level":"info","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50f03861a0e36fdf5083da7dd069cb97dfdcdcd74e365a9471ba230aad82962c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861"} {"level":"info","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"465ed9a0789eb83abaeac26b458127409a7f7d61a976d675e70b7b772212070e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/465ed9a0789eb83abaeac26b458127409a7f7d61a976d675e70b7b772212070e"} {"level":"info","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"465ed9a0789eb83abaeac26b458127409a7f7d61a976d675e70b7b772212070e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50f03861a0e36fdf5083da7dd069cb97dfdcdcd74e365a9471ba230aad82962c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50f03861a0e36fdf5083da7dd069cb97dfdcdcd74e365a9471ba230aad82962c"} {"level":"info","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50f03861a0e36fdf5083da7dd069cb97dfdcdcd74e365a9471ba230aad82962c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3"} {"level":"info","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d"} {"level":"info","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"465ed9a0789eb83abaeac26b458127409a7f7d61a976d675e70b7b772212070e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["465ed9a0789eb83abaeac26b458127409a7f7d61a976d675e70b7b772212070e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31"} {"level":"info","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"465ed9a0789eb83abaeac26b458127409a7f7d61a976d675e70b7b772212070e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50f03861a0e36fdf5083da7dd069cb97dfdcdcd74e365a9471ba230aad82962c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50f03861a0e36fdf5083da7dd069cb97dfdcdcd74e365a9471ba230aad82962c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/465ed9a0789eb83abaeac26b458127409a7f7d61a976d675e70b7b772212070e"} {"level":"info","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50f03861a0e36fdf5083da7dd069cb97dfdcdcd74e365a9471ba230aad82962c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50f03861a0e36fdf5083da7dd069cb97dfdcdcd74e365a9471ba230aad82962c"} {"level":"info","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3"} {"level":"info","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"465ed9a0789eb83abaeac26b458127409a7f7d61a976d675e70b7b772212070e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50f03861a0e36fdf5083da7dd069cb97dfdcdcd74e365a9471ba230aad82962c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d"} {"level":"info","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/465ed9a0789eb83abaeac26b458127409a7f7d61a976d675e70b7b772212070e"} {"level":"info","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50f03861a0e36fdf5083da7dd069cb97dfdcdcd74e365a9471ba230aad82962c"} {"level":"info","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31"} {"level":"info","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3"} {"level":"error","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d"} {"level":"info","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d"} {"level":"debug","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:40:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d"} {"level":"info","ts":"2026-07-17T14:40:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ef007ea4-1aea-42f2-864e-0f04222dda05","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:42488","PortSpecifier":{"PortValue":42488}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.101:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ef007ea4-1aea-42f2-864e-0f04222dda05","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-244a73.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T14:40:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ef007ea4-1aea-42f2-864e-0f04222dda05","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:42488","PortSpecifier":{"PortValue":42488}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.101:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784299212,"nanos":435591723},"http":{"id":"ef007ea4-1aea-42f2-864e-0f04222dda05","method":"POST","headers":{":authority":"e2e-shared-a-244a73.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T14:40:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ef007ea4-1aea-42f2-864e-0f04222dda05","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T14:40:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ef007ea4-1aea-42f2-864e-0f04222dda05","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"de491402-0b93-4648-a022-505c097cd610","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e645c696-460f-41b3-b391-2e55602b163a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c3765a88c95"]}} {"level":"debug","ts":"2026-07-17T14:40:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ef007ea4-1aea-42f2-864e-0f04222dda05","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c3765a88c95"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e645c696-460f-41b3-b391-2e55602b163a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de491402-0b93-4648-a022-505c097cd610","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b9a9673d41f2de079fe25aeb77889a2054753385a477ec9d8c0e96179d8f04c5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.101:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-244a73.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T14:40:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef007ea4-1aea-42f2-864e-0f04222dda05","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:40:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef007ea4-1aea-42f2-864e-0f04222dda05","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:40:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef007ea4-1aea-42f2-864e-0f04222dda05","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-244a73/auth-test-model-244a73\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-244a73/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:40:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ef007ea4-1aea-42f2-864e-0f04222dda05","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T14:40:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef007ea4-1aea-42f2-864e-0f04222dda05","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T14:40:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef007ea4-1aea-42f2-864e-0f04222dda05","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T14:40:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ef007ea4-1aea-42f2-864e-0f04222dda05","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T14:40:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ef007ea4-1aea-42f2-864e-0f04222dda05","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T14:40:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"53839407-c991-4163-98cf-bb1ca9eb1c07","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:49656","PortSpecifier":{"PortValue":49656}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.102:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"53839407-c991-4163-98cf-bb1ca9eb1c07","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-9eb655.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T14:40:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"53839407-c991-4163-98cf-bb1ca9eb1c07","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:49656","PortSpecifier":{"PortValue":49656}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.102:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784299212,"nanos":473403692},"http":{"id":"53839407-c991-4163-98cf-bb1ca9eb1c07","method":"POST","headers":{":authority":"e2e-shared-b-9eb655.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T14:40:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"53839407-c991-4163-98cf-bb1ca9eb1c07","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T14:40:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"53839407-c991-4163-98cf-bb1ca9eb1c07","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"de491402-0b93-4648-a022-505c097cd610","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e645c696-460f-41b3-b391-2e55602b163a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c3765a88c95"]}} {"level":"debug","ts":"2026-07-17T14:40:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"53839407-c991-4163-98cf-bb1ca9eb1c07","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c3765a88c95"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e645c696-460f-41b3-b391-2e55602b163a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de491402-0b93-4648-a022-505c097cd610","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.102:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-9eb655.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T14:40:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53839407-c991-4163-98cf-bb1ca9eb1c07","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:40:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53839407-c991-4163-98cf-bb1ca9eb1c07","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:40:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53839407-c991-4163-98cf-bb1ca9eb1c07","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-9eb655/auth-test-model-9eb655\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-9eb655/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:40:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"53839407-c991-4163-98cf-bb1ca9eb1c07","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T14:40:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"53839407-c991-4163-98cf-bb1ca9eb1c07","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T14:40:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"53839407-c991-4163-98cf-bb1ca9eb1c07","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T14:40:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"53839407-c991-4163-98cf-bb1ca9eb1c07","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T14:40:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"53839407-c991-4163-98cf-bb1ca9eb1c07","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T14:40:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fc7d7dfc-4de6-42f6-8af3-fcf50d99d30c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:42494","PortSpecifier":{"PortValue":42494}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.101:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fc7d7dfc-4de6-42f6-8af3-fcf50d99d30c","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-244a73.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T14:40:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fc7d7dfc-4de6-42f6-8af3-fcf50d99d30c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:42494","PortSpecifier":{"PortValue":42494}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.101:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784299212,"nanos":509400161},"http":{"id":"fc7d7dfc-4de6-42f6-8af3-fcf50d99d30c","method":"POST","headers":{":authority":"e2e-shared-a-244a73.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T14:40:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fc7d7dfc-4de6-42f6-8af3-fcf50d99d30c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T14:40:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fc7d7dfc-4de6-42f6-8af3-fcf50d99d30c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"de491402-0b93-4648-a022-505c097cd610","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e645c696-460f-41b3-b391-2e55602b163a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c3765a88c95"]}} {"level":"debug","ts":"2026-07-17T14:40:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fc7d7dfc-4de6-42f6-8af3-fcf50d99d30c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c3765a88c95"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e645c696-460f-41b3-b391-2e55602b163a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de491402-0b93-4648-a022-505c097cd610","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b9a9673d41f2de079fe25aeb77889a2054753385a477ec9d8c0e96179d8f04c5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.101:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-244a73.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T14:40:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc7d7dfc-4de6-42f6-8af3-fcf50d99d30c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:40:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc7d7dfc-4de6-42f6-8af3-fcf50d99d30c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:40:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc7d7dfc-4de6-42f6-8af3-fcf50d99d30c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-244a73/auth-test-model-244a73\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-244a73/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:40:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fc7d7dfc-4de6-42f6-8af3-fcf50d99d30c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T14:40:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc7d7dfc-4de6-42f6-8af3-fcf50d99d30c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T14:40:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc7d7dfc-4de6-42f6-8af3-fcf50d99d30c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T14:40:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fc7d7dfc-4de6-42f6-8af3-fcf50d99d30c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T14:40:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fc7d7dfc-4de6-42f6-8af3-fcf50d99d30c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T14:40:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d158cd3-5004-4885-bf9b-effd3257842e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:49662","PortSpecifier":{"PortValue":49662}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.102:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0d158cd3-5004-4885-bf9b-effd3257842e","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-9eb655.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T14:40:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d158cd3-5004-4885-bf9b-effd3257842e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:49662","PortSpecifier":{"PortValue":49662}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.102:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784299212,"nanos":541214966},"http":{"id":"0d158cd3-5004-4885-bf9b-effd3257842e","method":"POST","headers":{":authority":"e2e-shared-b-9eb655.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T14:40:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0d158cd3-5004-4885-bf9b-effd3257842e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T14:40:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0d158cd3-5004-4885-bf9b-effd3257842e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"de491402-0b93-4648-a022-505c097cd610","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e645c696-460f-41b3-b391-2e55602b163a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c3765a88c95"]}} {"level":"debug","ts":"2026-07-17T14:40:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0d158cd3-5004-4885-bf9b-effd3257842e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c3765a88c95"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e645c696-460f-41b3-b391-2e55602b163a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de491402-0b93-4648-a022-505c097cd610","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.102:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-9eb655.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T14:40:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d158cd3-5004-4885-bf9b-effd3257842e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:40:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d158cd3-5004-4885-bf9b-effd3257842e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:40:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d158cd3-5004-4885-bf9b-effd3257842e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-9eb655/auth-test-model-9eb655\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-9eb655/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:40:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0d158cd3-5004-4885-bf9b-effd3257842e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T14:40:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d158cd3-5004-4885-bf9b-effd3257842e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T14:40:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d158cd3-5004-4885-bf9b-effd3257842e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T14:40:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d158cd3-5004-4885-bf9b-effd3257842e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T14:40:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d158cd3-5004-4885-bf9b-effd3257842e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T14:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96"} {"level":"info","ts":"2026-07-17T14:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3"} {"level":"info","ts":"2026-07-17T14:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3"} {"level":"info","ts":"2026-07-17T14:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126"} {"level":"info","ts":"2026-07-17T14:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/22ddf5e057c7c651458758b2cb4987ed2f31e6cb3574bd42590411a746d1e6a3"} {"level":"info","ts":"2026-07-17T14:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861"} {"level":"info","ts":"2026-07-17T14:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/465ed9a0789eb83abaeac26b458127409a7f7d61a976d675e70b7b772212070e"} {"level":"info","ts":"2026-07-17T14:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31"} {"level":"info","ts":"2026-07-17T14:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1d86238d7eec08524b6fd488df3171094cc9f362c1191dba8c3b909865376021"} {"level":"info","ts":"2026-07-17T14:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/50f03861a0e36fdf5083da7dd069cb97dfdcdcd74e365a9471ba230aad82962c"} {"level":"info","ts":"2026-07-17T14:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6fd9d8e21137a7d1d77273cd3c60f9b6b443a71e62c483bf6e4d1b98cb2f33bb"} {"level":"info","ts":"2026-07-17T14:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d"} {"level":"debug","ts":"2026-07-17T14:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d86238d7eec08524b6fd488df3171094cc9f362c1191dba8c3b909865376021","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d86238d7eec08524b6fd488df3171094cc9f362c1191dba8c3b909865376021","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d86238d7eec08524b6fd488df3171094cc9f362c1191dba8c3b909865376021","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d86238d7eec08524b6fd488df3171094cc9f362c1191dba8c3b909865376021"} {"level":"info","ts":"2026-07-17T14:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d86238d7eec08524b6fd488df3171094cc9f362c1191dba8c3b909865376021","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d86238d7eec08524b6fd488df3171094cc9f362c1191dba8c3b909865376021","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-17T14:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1d86238d7eec08524b6fd488df3171094cc9f362c1191dba8c3b909865376021","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1d86238d7eec08524b6fd488df3171094cc9f362c1191dba8c3b909865376021\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T14:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d86238d7eec08524b6fd488df3171094cc9f362c1191dba8c3b909865376021","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d86238d7eec08524b6fd488df3171094cc9f362c1191dba8c3b909865376021"} {"level":"debug","ts":"2026-07-17T14:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d86238d7eec08524b6fd488df3171094cc9f362c1191dba8c3b909865376021","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d86238d7eec08524b6fd488df3171094cc9f362c1191dba8c3b909865376021"} {"level":"debug","ts":"2026-07-17T14:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d86238d7eec08524b6fd488df3171094cc9f362c1191dba8c3b909865376021","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d86238d7eec08524b6fd488df3171094cc9f362c1191dba8c3b909865376021"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d86238d7eec08524b6fd488df3171094cc9f362c1191dba8c3b909865376021","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d86238d7eec08524b6fd488df3171094cc9f362c1191dba8c3b909865376021","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d86238d7eec08524b6fd488df3171094cc9f362c1191dba8c3b909865376021"} {"level":"debug","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fd9d8e21137a7d1d77273cd3c60f9b6b443a71e62c483bf6e4d1b98cb2f33bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fd9d8e21137a7d1d77273cd3c60f9b6b443a71e62c483bf6e4d1b98cb2f33bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fd9d8e21137a7d1d77273cd3c60f9b6b443a71e62c483bf6e4d1b98cb2f33bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fd9d8e21137a7d1d77273cd3c60f9b6b443a71e62c483bf6e4d1b98cb2f33bb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fd9d8e21137a7d1d77273cd3c60f9b6b443a71e62c483bf6e4d1b98cb2f33bb"} {"level":"debug","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fd9d8e21137a7d1d77273cd3c60f9b6b443a71e62c483bf6e4d1b98cb2f33bb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fd9d8e21137a7d1d77273cd3c60f9b6b443a71e62c483bf6e4d1b98cb2f33bb"} {"level":"debug","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fd9d8e21137a7d1d77273cd3c60f9b6b443a71e62c483bf6e4d1b98cb2f33bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6fd9d8e21137a7d1d77273cd3c60f9b6b443a71e62c483bf6e4d1b98cb2f33bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fd9d8e21137a7d1d77273cd3c60f9b6b443a71e62c483bf6e4d1b98cb2f33bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fd9d8e21137a7d1d77273cd3c60f9b6b443a71e62c483bf6e4d1b98cb2f33bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fd9d8e21137a7d1d77273cd3c60f9b6b443a71e62c483bf6e4d1b98cb2f33bb"} {"level":"debug","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3"} {"level":"debug","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3"} {"level":"debug","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96"} {"level":"debug","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96"} {"level":"info","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3"} {"level":"info","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96"} {"level":"info","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3"} {"level":"info","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"465ed9a0789eb83abaeac26b458127409a7f7d61a976d675e70b7b772212070e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96"} {"level":"info","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"465ed9a0789eb83abaeac26b458127409a7f7d61a976d675e70b7b772212070e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"465ed9a0789eb83abaeac26b458127409a7f7d61a976d675e70b7b772212070e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"465ed9a0789eb83abaeac26b458127409a7f7d61a976d675e70b7b772212070e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"465ed9a0789eb83abaeac26b458127409a7f7d61a976d675e70b7b772212070e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/465ed9a0789eb83abaeac26b458127409a7f7d61a976d675e70b7b772212070e"} {"level":"error","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"465ed9a0789eb83abaeac26b458127409a7f7d61a976d675e70b7b772212070e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"465ed9a0789eb83abaeac26b458127409a7f7d61a976d675e70b7b772212070e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"465ed9a0789eb83abaeac26b458127409a7f7d61a976d675e70b7b772212070e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["465ed9a0789eb83abaeac26b458127409a7f7d61a976d675e70b7b772212070e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"465ed9a0789eb83abaeac26b458127409a7f7d61a976d675e70b7b772212070e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"465ed9a0789eb83abaeac26b458127409a7f7d61a976d675e70b7b772212070e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["465ed9a0789eb83abaeac26b458127409a7f7d61a976d675e70b7b772212070e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3"} {"level":"error","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"465ed9a0789eb83abaeac26b458127409a7f7d61a976d675e70b7b772212070e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"465ed9a0789eb83abaeac26b458127409a7f7d61a976d675e70b7b772212070e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"465ed9a0789eb83abaeac26b458127409a7f7d61a976d675e70b7b772212070e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"465ed9a0789eb83abaeac26b458127409a7f7d61a976d675e70b7b772212070e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96"} {"level":"info","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/465ed9a0789eb83abaeac26b458127409a7f7d61a976d675e70b7b772212070e"} {"level":"debug","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3"} {"level":"info","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3"} {"level":"info","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3"} {"level":"debug","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22ddf5e057c7c651458758b2cb4987ed2f31e6cb3574bd42590411a746d1e6a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3"} {"level":"info","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22ddf5e057c7c651458758b2cb4987ed2f31e6cb3574bd42590411a746d1e6a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22ddf5e057c7c651458758b2cb4987ed2f31e6cb3574bd42590411a746d1e6a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22ddf5e057c7c651458758b2cb4987ed2f31e6cb3574bd42590411a746d1e6a3"} {"level":"info","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22ddf5e057c7c651458758b2cb4987ed2f31e6cb3574bd42590411a746d1e6a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3"} {"level":"info","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22ddf5e057c7c651458758b2cb4987ed2f31e6cb3574bd42590411a746d1e6a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22ddf5e057c7c651458758b2cb4987ed2f31e6cb3574bd42590411a746d1e6a3"} {"level":"info","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22ddf5e057c7c651458758b2cb4987ed2f31e6cb3574bd42590411a746d1e6a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22ddf5e057c7c651458758b2cb4987ed2f31e6cb3574bd42590411a746d1e6a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3"} {"level":"info","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22ddf5e057c7c651458758b2cb4987ed2f31e6cb3574bd42590411a746d1e6a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22ddf5e057c7c651458758b2cb4987ed2f31e6cb3574bd42590411a746d1e6a3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3"} {"level":"debug","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22ddf5e057c7c651458758b2cb4987ed2f31e6cb3574bd42590411a746d1e6a3"} {"level":"info","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3"} {"level":"debug","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31"} {"level":"info","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31"} {"level":"info","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31"} {"level":"debug","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126"} {"level":"info","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31"} {"level":"info","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126"} {"level":"info","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31"} {"level":"info","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126"} {"level":"info","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50f03861a0e36fdf5083da7dd069cb97dfdcdcd74e365a9471ba230aad82962c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31"} {"level":"info","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50f03861a0e36fdf5083da7dd069cb97dfdcdcd74e365a9471ba230aad82962c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50f03861a0e36fdf5083da7dd069cb97dfdcdcd74e365a9471ba230aad82962c"} {"level":"info","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50f03861a0e36fdf5083da7dd069cb97dfdcdcd74e365a9471ba230aad82962c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50f03861a0e36fdf5083da7dd069cb97dfdcdcd74e365a9471ba230aad82962c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50f03861a0e36fdf5083da7dd069cb97dfdcdcd74e365a9471ba230aad82962c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126"} {"level":"info","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50f03861a0e36fdf5083da7dd069cb97dfdcdcd74e365a9471ba230aad82962c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31"} {"level":"debug","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50f03861a0e36fdf5083da7dd069cb97dfdcdcd74e365a9471ba230aad82962c"} {"level":"info","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126"} {"level":"debug","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d"} {"level":"info","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861"} {"level":"info","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d"} {"level":"info","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861"} {"level":"error","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861"} {"level":"debug","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d"} {"level":"debug","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861"} {"level":"info","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861"} {"level":"debug","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861"} {"level":"debug","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861"} {"level":"debug","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861"} {"level":"debug","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861"} {"level":"debug","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861"} {"level":"info","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861"} {"level":"info","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861"} {"level":"error","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:40:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"42200dda-95eb-4ead-82c0-0042b3b10ff3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:33008","PortSpecifier":{"PortValue":33008}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.101:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"42200dda-95eb-4ead-82c0-0042b3b10ff3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-244a73.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T14:40:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"42200dda-95eb-4ead-82c0-0042b3b10ff3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:33008","PortSpecifier":{"PortValue":33008}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.101:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784299231,"nanos":793175660},"http":{"id":"42200dda-95eb-4ead-82c0-0042b3b10ff3","method":"POST","headers":{":authority":"e2e-shared-a-244a73.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T14:40:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"42200dda-95eb-4ead-82c0-0042b3b10ff3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T14:40:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"42200dda-95eb-4ead-82c0-0042b3b10ff3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"de491402-0b93-4648-a022-505c097cd610","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e645c696-460f-41b3-b391-2e55602b163a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c3765a88c95"]}} {"level":"debug","ts":"2026-07-17T14:40:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"42200dda-95eb-4ead-82c0-0042b3b10ff3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c3765a88c95"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e645c696-460f-41b3-b391-2e55602b163a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de491402-0b93-4648-a022-505c097cd610","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b9a9673d41f2de079fe25aeb77889a2054753385a477ec9d8c0e96179d8f04c5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.101:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-244a73.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T14:40:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42200dda-95eb-4ead-82c0-0042b3b10ff3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:40:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42200dda-95eb-4ead-82c0-0042b3b10ff3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:40:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42200dda-95eb-4ead-82c0-0042b3b10ff3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-244a73/auth-test-model-244a73\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-244a73/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:40:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"42200dda-95eb-4ead-82c0-0042b3b10ff3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T14:40:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"42200dda-95eb-4ead-82c0-0042b3b10ff3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T14:40:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"42200dda-95eb-4ead-82c0-0042b3b10ff3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T14:40:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"42200dda-95eb-4ead-82c0-0042b3b10ff3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T14:40:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"42200dda-95eb-4ead-82c0-0042b3b10ff3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T14:40:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c2b12b3f-b7b5-4523-b1f4-13b96cc9e5cf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:37098","PortSpecifier":{"PortValue":37098}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.102:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c2b12b3f-b7b5-4523-b1f4-13b96cc9e5cf","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-9eb655.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T14:40:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c2b12b3f-b7b5-4523-b1f4-13b96cc9e5cf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:37098","PortSpecifier":{"PortValue":37098}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.102:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784299231,"nanos":828544152},"http":{"id":"c2b12b3f-b7b5-4523-b1f4-13b96cc9e5cf","method":"POST","headers":{":authority":"e2e-shared-b-9eb655.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T14:40:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c2b12b3f-b7b5-4523-b1f4-13b96cc9e5cf","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T14:40:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c2b12b3f-b7b5-4523-b1f4-13b96cc9e5cf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"de491402-0b93-4648-a022-505c097cd610","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e645c696-460f-41b3-b391-2e55602b163a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c3765a88c95"]}} {"level":"debug","ts":"2026-07-17T14:40:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c2b12b3f-b7b5-4523-b1f4-13b96cc9e5cf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c3765a88c95"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e645c696-460f-41b3-b391-2e55602b163a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de491402-0b93-4648-a022-505c097cd610","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.102:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-9eb655.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T14:40:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2b12b3f-b7b5-4523-b1f4-13b96cc9e5cf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:40:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2b12b3f-b7b5-4523-b1f4-13b96cc9e5cf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:40:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2b12b3f-b7b5-4523-b1f4-13b96cc9e5cf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-9eb655/auth-test-model-9eb655\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-9eb655/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:40:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c2b12b3f-b7b5-4523-b1f4-13b96cc9e5cf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T14:40:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2b12b3f-b7b5-4523-b1f4-13b96cc9e5cf","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T14:40:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2b12b3f-b7b5-4523-b1f4-13b96cc9e5cf","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T14:40:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c2b12b3f-b7b5-4523-b1f4-13b96cc9e5cf","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T14:40:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c2b12b3f-b7b5-4523-b1f4-13b96cc9e5cf","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T14:40:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2f1e4f0f-c0af-42b9-a092-2b75e5c600f7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:37108","PortSpecifier":{"PortValue":37108}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.102:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2f1e4f0f-c0af-42b9-a092-2b75e5c600f7","method":"GET","path":"/maas-api/v1/api-keys/79db2576-7155-42c5-8eac-2a6ce6622f5d","host":"e2e-shared-b-9eb655.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T14:40:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2f1e4f0f-c0af-42b9-a092-2b75e5c600f7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:37108","PortSpecifier":{"PortValue":37108}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.102:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784299231,"nanos":868741537},"http":{"id":"2f1e4f0f-c0af-42b9-a092-2b75e5c600f7","method":"GET","headers":{":authority":"e2e-shared-b-9eb655.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/79db2576-7155-42c5-8eac-2a6ce6622f5d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T14:40:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2f1e4f0f-c0af-42b9-a092-2b75e5c600f7","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T14:40:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2f1e4f0f-c0af-42b9-a092-2b75e5c600f7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"de491402-0b93-4648-a022-505c097cd610","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e645c696-460f-41b3-b391-2e55602b163a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c3765a88c95"]}} {"level":"debug","ts":"2026-07-17T14:40:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2f1e4f0f-c0af-42b9-a092-2b75e5c600f7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c3765a88c95"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e645c696-460f-41b3-b391-2e55602b163a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de491402-0b93-4648-a022-505c097cd610","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.102:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-9eb655.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/79db2576-7155-42c5-8eac-2a6ce6622f5d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T14:40:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f1e4f0f-c0af-42b9-a092-2b75e5c600f7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:40:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f1e4f0f-c0af-42b9-a092-2b75e5c600f7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:40:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f1e4f0f-c0af-42b9-a092-2b75e5c600f7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-9eb655/auth-test-model-9eb655\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-9eb655/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:40:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2f1e4f0f-c0af-42b9-a092-2b75e5c600f7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T14:40:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f1e4f0f-c0af-42b9-a092-2b75e5c600f7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T14:40:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f1e4f0f-c0af-42b9-a092-2b75e5c600f7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T14:40:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2f1e4f0f-c0af-42b9-a092-2b75e5c600f7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T14:40:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2f1e4f0f-c0af-42b9-a092-2b75e5c600f7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T14:40:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3644d27e-bc09-4c83-b376-0e05e95101c2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:33012","PortSpecifier":{"PortValue":33012}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.101:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3644d27e-bc09-4c83-b376-0e05e95101c2","method":"GET","path":"/maas-api/v1/api-keys/79db2576-7155-42c5-8eac-2a6ce6622f5d","host":"e2e-shared-a-244a73.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T14:40:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3644d27e-bc09-4c83-b376-0e05e95101c2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:33012","PortSpecifier":{"PortValue":33012}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.101:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784299231,"nanos":899237268},"http":{"id":"3644d27e-bc09-4c83-b376-0e05e95101c2","method":"GET","headers":{":authority":"e2e-shared-a-244a73.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/79db2576-7155-42c5-8eac-2a6ce6622f5d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T14:40:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3644d27e-bc09-4c83-b376-0e05e95101c2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T14:40:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3644d27e-bc09-4c83-b376-0e05e95101c2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"de491402-0b93-4648-a022-505c097cd610","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e645c696-460f-41b3-b391-2e55602b163a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c3765a88c95"]}} {"level":"debug","ts":"2026-07-17T14:40:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3644d27e-bc09-4c83-b376-0e05e95101c2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c3765a88c95"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e645c696-460f-41b3-b391-2e55602b163a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de491402-0b93-4648-a022-505c097cd610","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b9a9673d41f2de079fe25aeb77889a2054753385a477ec9d8c0e96179d8f04c5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.101:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-244a73.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/79db2576-7155-42c5-8eac-2a6ce6622f5d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T14:40:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3644d27e-bc09-4c83-b376-0e05e95101c2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:40:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3644d27e-bc09-4c83-b376-0e05e95101c2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:40:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3644d27e-bc09-4c83-b376-0e05e95101c2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-244a73/auth-test-model-244a73\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-244a73/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:40:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3644d27e-bc09-4c83-b376-0e05e95101c2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T14:40:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3644d27e-bc09-4c83-b376-0e05e95101c2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T14:40:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3644d27e-bc09-4c83-b376-0e05e95101c2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T14:40:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3644d27e-bc09-4c83-b376-0e05e95101c2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T14:40:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3644d27e-bc09-4c83-b376-0e05e95101c2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T14:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/465ed9a0789eb83abaeac26b458127409a7f7d61a976d675e70b7b772212070e"} {"level":"info","ts":"2026-07-17T14:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3"} {"level":"info","ts":"2026-07-17T14:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/50f03861a0e36fdf5083da7dd069cb97dfdcdcd74e365a9471ba230aad82962c"} {"level":"info","ts":"2026-07-17T14:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d"} {"level":"info","ts":"2026-07-17T14:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1d86238d7eec08524b6fd488df3171094cc9f362c1191dba8c3b909865376021"} {"level":"info","ts":"2026-07-17T14:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96"} {"level":"info","ts":"2026-07-17T14:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31"} {"level":"info","ts":"2026-07-17T14:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/22ddf5e057c7c651458758b2cb4987ed2f31e6cb3574bd42590411a746d1e6a3"} {"level":"info","ts":"2026-07-17T14:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6fd9d8e21137a7d1d77273cd3c60f9b6b443a71e62c483bf6e4d1b98cb2f33bb"} {"level":"info","ts":"2026-07-17T14:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861"} {"level":"info","ts":"2026-07-17T14:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3"} {"level":"info","ts":"2026-07-17T14:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126"} {"level":"debug","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50f03861a0e36fdf5083da7dd069cb97dfdcdcd74e365a9471ba230aad82962c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50f03861a0e36fdf5083da7dd069cb97dfdcdcd74e365a9471ba230aad82962c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50f03861a0e36fdf5083da7dd069cb97dfdcdcd74e365a9471ba230aad82962c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50f03861a0e36fdf5083da7dd069cb97dfdcdcd74e365a9471ba230aad82962c"} {"level":"debug","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50f03861a0e36fdf5083da7dd069cb97dfdcdcd74e365a9471ba230aad82962c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50f03861a0e36fdf5083da7dd069cb97dfdcdcd74e365a9471ba230aad82962c"} {"level":"debug","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50f03861a0e36fdf5083da7dd069cb97dfdcdcd74e365a9471ba230aad82962c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50f03861a0e36fdf5083da7dd069cb97dfdcdcd74e365a9471ba230aad82962c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50f03861a0e36fdf5083da7dd069cb97dfdcdcd74e365a9471ba230aad82962c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50f03861a0e36fdf5083da7dd069cb97dfdcdcd74e365a9471ba230aad82962c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50f03861a0e36fdf5083da7dd069cb97dfdcdcd74e365a9471ba230aad82962c"} {"level":"debug","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"465ed9a0789eb83abaeac26b458127409a7f7d61a976d675e70b7b772212070e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"465ed9a0789eb83abaeac26b458127409a7f7d61a976d675e70b7b772212070e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"465ed9a0789eb83abaeac26b458127409a7f7d61a976d675e70b7b772212070e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/465ed9a0789eb83abaeac26b458127409a7f7d61a976d675e70b7b772212070e"} {"level":"debug","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"465ed9a0789eb83abaeac26b458127409a7f7d61a976d675e70b7b772212070e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/465ed9a0789eb83abaeac26b458127409a7f7d61a976d675e70b7b772212070e"} {"level":"debug","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"465ed9a0789eb83abaeac26b458127409a7f7d61a976d675e70b7b772212070e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["465ed9a0789eb83abaeac26b458127409a7f7d61a976d675e70b7b772212070e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"465ed9a0789eb83abaeac26b458127409a7f7d61a976d675e70b7b772212070e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"465ed9a0789eb83abaeac26b458127409a7f7d61a976d675e70b7b772212070e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"465ed9a0789eb83abaeac26b458127409a7f7d61a976d675e70b7b772212070e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"465ed9a0789eb83abaeac26b458127409a7f7d61a976d675e70b7b772212070e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/465ed9a0789eb83abaeac26b458127409a7f7d61a976d675e70b7b772212070e"} {"level":"debug","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"465ed9a0789eb83abaeac26b458127409a7f7d61a976d675e70b7b772212070e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"465ed9a0789eb83abaeac26b458127409a7f7d61a976d675e70b7b772212070e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/465ed9a0789eb83abaeac26b458127409a7f7d61a976d675e70b7b772212070e"} {"level":"info","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31"} {"level":"info","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"465ed9a0789eb83abaeac26b458127409a7f7d61a976d675e70b7b772212070e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["465ed9a0789eb83abaeac26b458127409a7f7d61a976d675e70b7b772212070e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31"} {"level":"info","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"465ed9a0789eb83abaeac26b458127409a7f7d61a976d675e70b7b772212070e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"465ed9a0789eb83abaeac26b458127409a7f7d61a976d675e70b7b772212070e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31"} {"level":"info","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/465ed9a0789eb83abaeac26b458127409a7f7d61a976d675e70b7b772212070e"} {"level":"debug","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fd9d8e21137a7d1d77273cd3c60f9b6b443a71e62c483bf6e4d1b98cb2f33bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fd9d8e21137a7d1d77273cd3c60f9b6b443a71e62c483bf6e4d1b98cb2f33bb"} {"level":"info","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fd9d8e21137a7d1d77273cd3c60f9b6b443a71e62c483bf6e4d1b98cb2f33bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fd9d8e21137a7d1d77273cd3c60f9b6b443a71e62c483bf6e4d1b98cb2f33bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6fd9d8e21137a7d1d77273cd3c60f9b6b443a71e62c483bf6e4d1b98cb2f33bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31"} {"level":"info","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fd9d8e21137a7d1d77273cd3c60f9b6b443a71e62c483bf6e4d1b98cb2f33bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fd9d8e21137a7d1d77273cd3c60f9b6b443a71e62c483bf6e4d1b98cb2f33bb"} {"level":"info","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fd9d8e21137a7d1d77273cd3c60f9b6b443a71e62c483bf6e4d1b98cb2f33bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31"} {"level":"info","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d86238d7eec08524b6fd488df3171094cc9f362c1191dba8c3b909865376021","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fd9d8e21137a7d1d77273cd3c60f9b6b443a71e62c483bf6e4d1b98cb2f33bb"} {"level":"info","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d86238d7eec08524b6fd488df3171094cc9f362c1191dba8c3b909865376021","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31"} {"level":"info","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d86238d7eec08524b6fd488df3171094cc9f362c1191dba8c3b909865376021","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d86238d7eec08524b6fd488df3171094cc9f362c1191dba8c3b909865376021"} {"level":"info","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d86238d7eec08524b6fd488df3171094cc9f362c1191dba8c3b909865376021","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d86238d7eec08524b6fd488df3171094cc9f362c1191dba8c3b909865376021","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d86238d7eec08524b6fd488df3171094cc9f362c1191dba8c3b909865376021"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31"} {"level":"info","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d86238d7eec08524b6fd488df3171094cc9f362c1191dba8c3b909865376021","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d86238d7eec08524b6fd488df3171094cc9f362c1191dba8c3b909865376021"} {"level":"info","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d86238d7eec08524b6fd488df3171094cc9f362c1191dba8c3b909865376021","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d86238d7eec08524b6fd488df3171094cc9f362c1191dba8c3b909865376021","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d86238d7eec08524b6fd488df3171094cc9f362c1191dba8c3b909865376021","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d86238d7eec08524b6fd488df3171094cc9f362c1191dba8c3b909865376021","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22ddf5e057c7c651458758b2cb4987ed2f31e6cb3574bd42590411a746d1e6a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d86238d7eec08524b6fd488df3171094cc9f362c1191dba8c3b909865376021"} {"level":"info","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22ddf5e057c7c651458758b2cb4987ed2f31e6cb3574bd42590411a746d1e6a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31"} {"level":"info","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22ddf5e057c7c651458758b2cb4987ed2f31e6cb3574bd42590411a746d1e6a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22ddf5e057c7c651458758b2cb4987ed2f31e6cb3574bd42590411a746d1e6a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d86238d7eec08524b6fd488df3171094cc9f362c1191dba8c3b909865376021","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d86238d7eec08524b6fd488df3171094cc9f362c1191dba8c3b909865376021"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22ddf5e057c7c651458758b2cb4987ed2f31e6cb3574bd42590411a746d1e6a3"} {"level":"info","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d86238d7eec08524b6fd488df3171094cc9f362c1191dba8c3b909865376021","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22ddf5e057c7c651458758b2cb4987ed2f31e6cb3574bd42590411a746d1e6a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22ddf5e057c7c651458758b2cb4987ed2f31e6cb3574bd42590411a746d1e6a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22ddf5e057c7c651458758b2cb4987ed2f31e6cb3574bd42590411a746d1e6a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d86238d7eec08524b6fd488df3171094cc9f362c1191dba8c3b909865376021","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d86238d7eec08524b6fd488df3171094cc9f362c1191dba8c3b909865376021","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22ddf5e057c7c651458758b2cb4987ed2f31e6cb3574bd42590411a746d1e6a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d86238d7eec08524b6fd488df3171094cc9f362c1191dba8c3b909865376021"} {"level":"info","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d86238d7eec08524b6fd488df3171094cc9f362c1191dba8c3b909865376021","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d86238d7eec08524b6fd488df3171094cc9f362c1191dba8c3b909865376021"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d86238d7eec08524b6fd488df3171094cc9f362c1191dba8c3b909865376021","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d"} {"level":"info","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d86238d7eec08524b6fd488df3171094cc9f362c1191dba8c3b909865376021","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22ddf5e057c7c651458758b2cb4987ed2f31e6cb3574bd42590411a746d1e6a3"} {"level":"debug","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3"} {"level":"debug","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d86238d7eec08524b6fd488df3171094cc9f362c1191dba8c3b909865376021"} {"level":"info","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d"} {"level":"info","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126"} {"level":"info","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3"} {"level":"info","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3"} {"level":"info","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126"} {"level":"info","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3"} {"level":"info","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861"} {"level":"info","ts":"2026-07-17T14:40:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96"} {"level":"info","ts":"2026-07-17T14:40:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126"} {"level":"info","ts":"2026-07-17T14:40:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:40:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3"} {"level":"debug","ts":"2026-07-17T14:40:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:40:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:40:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:40:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:40:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96"} {"level":"debug","ts":"2026-07-17T14:40:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:40:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:40:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:40:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:40:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861"} {"level":"debug","ts":"2026-07-17T14:40:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:40:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3"} {"level":"info","ts":"2026-07-17T14:40:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96"} {"level":"info","ts":"2026-07-17T14:40:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2dcc0729-6bb1-4526-be6b-af8ea9095173","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:56022","PortSpecifier":{"PortValue":56022}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.101:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2dcc0729-6bb1-4526-be6b-af8ea9095173","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-244a73.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T14:40:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2dcc0729-6bb1-4526-be6b-af8ea9095173","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:56022","PortSpecifier":{"PortValue":56022}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.101:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784299251,"nanos":171179344},"http":{"id":"2dcc0729-6bb1-4526-be6b-af8ea9095173","method":"POST","headers":{":authority":"e2e-shared-a-244a73.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T14:40:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2dcc0729-6bb1-4526-be6b-af8ea9095173","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T14:40:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2dcc0729-6bb1-4526-be6b-af8ea9095173","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"de491402-0b93-4648-a022-505c097cd610","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e645c696-460f-41b3-b391-2e55602b163a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c3765a88c95"]}} {"level":"debug","ts":"2026-07-17T14:40:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2dcc0729-6bb1-4526-be6b-af8ea9095173","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c3765a88c95"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e645c696-460f-41b3-b391-2e55602b163a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de491402-0b93-4648-a022-505c097cd610","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b9a9673d41f2de079fe25aeb77889a2054753385a477ec9d8c0e96179d8f04c5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.101:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-244a73.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T14:40:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2dcc0729-6bb1-4526-be6b-af8ea9095173","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:40:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2dcc0729-6bb1-4526-be6b-af8ea9095173","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:40:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2dcc0729-6bb1-4526-be6b-af8ea9095173","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-244a73/auth-test-model-244a73\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-244a73/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:40:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2dcc0729-6bb1-4526-be6b-af8ea9095173","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T14:40:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2dcc0729-6bb1-4526-be6b-af8ea9095173","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T14:40:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2dcc0729-6bb1-4526-be6b-af8ea9095173","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T14:40:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2dcc0729-6bb1-4526-be6b-af8ea9095173","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T14:40:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2dcc0729-6bb1-4526-be6b-af8ea9095173","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T14:40:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c3a1d309-6d95-4c06-84c1-905c7e808da4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:50016","PortSpecifier":{"PortValue":50016}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.102:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c3a1d309-6d95-4c06-84c1-905c7e808da4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-9eb655.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T14:40:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c3a1d309-6d95-4c06-84c1-905c7e808da4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:50016","PortSpecifier":{"PortValue":50016}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.102:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784299251,"nanos":208968577},"http":{"id":"c3a1d309-6d95-4c06-84c1-905c7e808da4","method":"POST","headers":{":authority":"e2e-shared-b-9eb655.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T14:40:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c3a1d309-6d95-4c06-84c1-905c7e808da4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T14:40:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c3a1d309-6d95-4c06-84c1-905c7e808da4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"de491402-0b93-4648-a022-505c097cd610","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e645c696-460f-41b3-b391-2e55602b163a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c3765a88c95"]}} {"level":"debug","ts":"2026-07-17T14:40:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c3a1d309-6d95-4c06-84c1-905c7e808da4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c3765a88c95"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e645c696-460f-41b3-b391-2e55602b163a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de491402-0b93-4648-a022-505c097cd610","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.102:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-9eb655.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T14:40:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3a1d309-6d95-4c06-84c1-905c7e808da4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:40:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3a1d309-6d95-4c06-84c1-905c7e808da4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:40:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3a1d309-6d95-4c06-84c1-905c7e808da4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-9eb655/auth-test-model-9eb655\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-9eb655/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:40:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c3a1d309-6d95-4c06-84c1-905c7e808da4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T14:40:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3a1d309-6d95-4c06-84c1-905c7e808da4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T14:40:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3a1d309-6d95-4c06-84c1-905c7e808da4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T14:40:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c3a1d309-6d95-4c06-84c1-905c7e808da4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T14:40:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c3a1d309-6d95-4c06-84c1-905c7e808da4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T14:40:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"256ac42f-6919-4a1c-a867-8118e540168d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:55830","PortSpecifier":{"PortValue":55830}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.101:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"256ac42f-6919-4a1c-a867-8118e540168d","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-244a73.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T14:40:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"256ac42f-6919-4a1c-a867-8118e540168d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:55830","PortSpecifier":{"PortValue":55830}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.101:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784299251,"nanos":249378922},"http":{"id":"256ac42f-6919-4a1c-a867-8118e540168d","method":"POST","headers":{":authority":"e2e-shared-a-244a73.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T14:40:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"256ac42f-6919-4a1c-a867-8118e540168d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ZOkqE5NieyrGo6wx_IvuKeBUSMe8UgVAt9Czqcxf6m7ZmjOeEdzzLKHtsh7m"} {"level":"debug","ts":"2026-07-17T14:40:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"256ac42f-6919-4a1c-a867-8118e540168d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-244a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ZOkqE5NieyrGo6wx_IvuKeBUSMe8UgVAt9Czqcxf6m7ZmjOeEdzzLKHtsh7m\"}"} {"level":"debug","ts":"2026-07-17T14:40:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"256ac42f-6919-4a1c-a867-8118e540168d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-244a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7e55a955-0032-4543-92c1-c5f28efef191","keyName":"e2e-auth-iso-a-f1743b","subscription":"e2e-auth-iso-fdfd79","tenant":"e2e-shared-a-244a73","userId":"7e55a955-0032-4543-92c1-c5f28efef191","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T14:40:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"256ac42f-6919-4a1c-a867-8118e540168d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T14:40:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"256ac42f-6919-4a1c-a867-8118e540168d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:40:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"256ac42f-6919-4a1c-a867-8118e540168d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:40:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"256ac42f-6919-4a1c-a867-8118e540168d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-244a73/auth-test-model-244a73\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-244a73/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:40:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"256ac42f-6919-4a1c-a867-8118e540168d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T14:40:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"256ac42f-6919-4a1c-a867-8118e540168d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-17T14:40:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"256ac42f-6919-4a1c-a867-8118e540168d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-fdfd79"} {"level":"debug","ts":"2026-07-17T14:40:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"256ac42f-6919-4a1c-a867-8118e540168d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T14:40:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"256ac42f-6919-4a1c-a867-8118e540168d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T14:40:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"256ac42f-6919-4a1c-a867-8118e540168d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T14:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/04f5509afa3bb7abc9322fecd3ccc3b1dae766172ea77e1789bde47971712391"} {"level":"info","ts":"2026-07-17T14:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1d86238d7eec08524b6fd488df3171094cc9f362c1191dba8c3b909865376021"} {"level":"info","ts":"2026-07-17T14:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b9a9673d41f2de079fe25aeb77889a2054753385a477ec9d8c0e96179d8f04c5"} {"level":"info","ts":"2026-07-17T14:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8d5fe03fc193088cdd28287336eb3b24ea2fbcc04b4ff0247db9354527406b6d"} {"level":"info","ts":"2026-07-17T14:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/465ed9a0789eb83abaeac26b458127409a7f7d61a976d675e70b7b772212070e"} {"level":"info","ts":"2026-07-17T14:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96"} {"level":"info","ts":"2026-07-17T14:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6fd9d8e21137a7d1d77273cd3c60f9b6b443a71e62c483bf6e4d1b98cb2f33bb"} {"level":"info","ts":"2026-07-17T14:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8702743070232e2b19034873637d0bbeaa77f708ac930b3ef20e8948f72ba870"} {"level":"info","ts":"2026-07-17T14:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3a551b3d0036492362a2171a90fc7b003d043566b2e6de3db6b3d8fdba22fddf"} {"level":"info","ts":"2026-07-17T14:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3"} {"level":"info","ts":"2026-07-17T14:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d5af291991bdb222c5178ee3c65cbf179945fd523e50e77ede48e3966fe5ff31"} {"level":"info","ts":"2026-07-17T14:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b564ebe9e9d87f40a0f3dac52e7e9e87250da6526fbc6ba3e71b71428938b9e5"} {"level":"info","ts":"2026-07-17T14:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126"} {"level":"info","ts":"2026-07-17T14:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861"} {"level":"info","ts":"2026-07-17T14:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b3825f50db89db550aeaf5d53276aea4bb0896a0f6bfd0ad1d8e4be0648ba3d1"} {"level":"info","ts":"2026-07-17T14:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9af40badfdddecd71921886d8c967922fad1c02538c62648762bce9b056dd011"} {"level":"info","ts":"2026-07-17T14:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/88cb5e496de5c875a6da53b66db4459b799a367bd7ec328437e99e924d43fa51"} {"level":"info","ts":"2026-07-17T14:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/22ddf5e057c7c651458758b2cb4987ed2f31e6cb3574bd42590411a746d1e6a3"} {"level":"info","ts":"2026-07-17T14:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0b5c44584f949c4a0c4f758e52b51924e5504b5da4cde55d54e70cccb6c27e6a"} {"level":"info","ts":"2026-07-17T14:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/50f03861a0e36fdf5083da7dd069cb97dfdcdcd74e365a9471ba230aad82962c"} {"level":"info","ts":"2026-07-17T14:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4e075e8da804e7923dad1aae12f1da9a3b16da74a3f359b7efd4d663f09905e7"} {"level":"info","ts":"2026-07-17T14:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9f149879fcff4a0d88aee6edd9efc248865d5de5c90a6deeaa8b630c2480922d"} {"level":"info","ts":"2026-07-17T14:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ef09450e34ca2e43bc68ac8fef0d7129bc65fb791b7604f6895b496c3fe3e5d3"} {"level":"info","ts":"2026-07-17T14:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/687ddf2d762fd3370121f13232a3430273765b42c64bfba4484996d90211e8b7"} {"level":"debug","ts":"2026-07-17T14:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f95fa0f85dcfb07c42ce1c1c07f0de77f4b01f2acacdb16160afadd86f338126","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:41:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:41:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f95fa0f85dcfb07c42ce1c1c07f0de77f4b01f2acacdb16160afadd86f338126","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f95fa0f85dcfb07c42ce1c1c07f0de77f4b01f2acacdb16160afadd86f338126","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f95fa0f85dcfb07c42ce1c1c07f0de77f4b01f2acacdb16160afadd86f338126","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f95fa0f85dcfb07c42ce1c1c07f0de77f4b01f2acacdb16160afadd86f338126"} {"level":"info","ts":"2026-07-17T14:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f95fa0f85dcfb07c42ce1c1c07f0de77f4b01f2acacdb16160afadd86f338126"} {"level":"debug","ts":"2026-07-17T14:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f95fa0f85dcfb07c42ce1c1c07f0de77f4b01f2acacdb16160afadd86f338126","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:41:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:41:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f95fa0f85dcfb07c42ce1c1c07f0de77f4b01f2acacdb16160afadd86f338126"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f95fa0f85dcfb07c42ce1c1c07f0de77f4b01f2acacdb16160afadd86f338126","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f95fa0f85dcfb07c42ce1c1c07f0de77f4b01f2acacdb16160afadd86f338126","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:41:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:41:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f95fa0f85dcfb07c42ce1c1c07f0de77f4b01f2acacdb16160afadd86f338126","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f95fa0f85dcfb07c42ce1c1c07f0de77f4b01f2acacdb16160afadd86f338126","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f95fa0f85dcfb07c42ce1c1c07f0de77f4b01f2acacdb16160afadd86f338126"} {"level":"debug","ts":"2026-07-17T14:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f95fa0f85dcfb07c42ce1c1c07f0de77f4b01f2acacdb16160afadd86f338126","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f95fa0f85dcfb07c42ce1c1c07f0de77f4b01f2acacdb16160afadd86f338126"} {"level":"debug","ts":"2026-07-17T14:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f95fa0f85dcfb07c42ce1c1c07f0de77f4b01f2acacdb16160afadd86f338126","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:41:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:41:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f95fa0f85dcfb07c42ce1c1c07f0de77f4b01f2acacdb16160afadd86f338126"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f95fa0f85dcfb07c42ce1c1c07f0de77f4b01f2acacdb16160afadd86f338126","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f95fa0f85dcfb07c42ce1c1c07f0de77f4b01f2acacdb16160afadd86f338126","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:41:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:41:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f95fa0f85dcfb07c42ce1c1c07f0de77f4b01f2acacdb16160afadd86f338126","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f95fa0f85dcfb07c42ce1c1c07f0de77f4b01f2acacdb16160afadd86f338126","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f95fa0f85dcfb07c42ce1c1c07f0de77f4b01f2acacdb16160afadd86f338126"} {"level":"debug","ts":"2026-07-17T14:41:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f95fa0f85dcfb07c42ce1c1c07f0de77f4b01f2acacdb16160afadd86f338126","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f95fa0f85dcfb07c42ce1c1c07f0de77f4b01f2acacdb16160afadd86f338126"} {"level":"debug","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f95fa0f85dcfb07c42ce1c1c07f0de77f4b01f2acacdb16160afadd86f338126","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f95fa0f85dcfb07c42ce1c1c07f0de77f4b01f2acacdb16160afadd86f338126"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f95fa0f85dcfb07c42ce1c1c07f0de77f4b01f2acacdb16160afadd86f338126","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f95fa0f85dcfb07c42ce1c1c07f0de77f4b01f2acacdb16160afadd86f338126","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f95fa0f85dcfb07c42ce1c1c07f0de77f4b01f2acacdb16160afadd86f338126"} {"level":"debug","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93085cb3914d86a0c150ed9dd35dc99d122efba53b3123d7daa107a89f0423c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93085cb3914d86a0c150ed9dd35dc99d122efba53b3123d7daa107a89f0423c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93085cb3914d86a0c150ed9dd35dc99d122efba53b3123d7daa107a89f0423c3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93085cb3914d86a0c150ed9dd35dc99d122efba53b3123d7daa107a89f0423c3"} {"level":"debug","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93085cb3914d86a0c150ed9dd35dc99d122efba53b3123d7daa107a89f0423c3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93085cb3914d86a0c150ed9dd35dc99d122efba53b3123d7daa107a89f0423c3"} {"level":"debug","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93085cb3914d86a0c150ed9dd35dc99d122efba53b3123d7daa107a89f0423c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93085cb3914d86a0c150ed9dd35dc99d122efba53b3123d7daa107a89f0423c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93085cb3914d86a0c150ed9dd35dc99d122efba53b3123d7daa107a89f0423c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93085cb3914d86a0c150ed9dd35dc99d122efba53b3123d7daa107a89f0423c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93085cb3914d86a0c150ed9dd35dc99d122efba53b3123d7daa107a89f0423c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93085cb3914d86a0c150ed9dd35dc99d122efba53b3123d7daa107a89f0423c3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93085cb3914d86a0c150ed9dd35dc99d122efba53b3123d7daa107a89f0423c3"} {"level":"debug","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93085cb3914d86a0c150ed9dd35dc99d122efba53b3123d7daa107a89f0423c3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93085cb3914d86a0c150ed9dd35dc99d122efba53b3123d7daa107a89f0423c3"} {"level":"debug","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93085cb3914d86a0c150ed9dd35dc99d122efba53b3123d7daa107a89f0423c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93085cb3914d86a0c150ed9dd35dc99d122efba53b3123d7daa107a89f0423c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93085cb3914d86a0c150ed9dd35dc99d122efba53b3123d7daa107a89f0423c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93085cb3914d86a0c150ed9dd35dc99d122efba53b3123d7daa107a89f0423c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93085cb3914d86a0c150ed9dd35dc99d122efba53b3123d7daa107a89f0423c3"} {"level":"info","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93085cb3914d86a0c150ed9dd35dc99d122efba53b3123d7daa107a89f0423c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93085cb3914d86a0c150ed9dd35dc99d122efba53b3123d7daa107a89f0423c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93085cb3914d86a0c150ed9dd35dc99d122efba53b3123d7daa107a89f0423c3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93085cb3914d86a0c150ed9dd35dc99d122efba53b3123d7daa107a89f0423c3"} {"level":"debug","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93085cb3914d86a0c150ed9dd35dc99d122efba53b3123d7daa107a89f0423c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93085cb3914d86a0c150ed9dd35dc99d122efba53b3123d7daa107a89f0423c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93085cb3914d86a0c150ed9dd35dc99d122efba53b3123d7daa107a89f0423c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93085cb3914d86a0c150ed9dd35dc99d122efba53b3123d7daa107a89f0423c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93085cb3914d86a0c150ed9dd35dc99d122efba53b3123d7daa107a89f0423c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"757b7f1578aeea5557e71e4b83b3d1eb1b31283d3945de1424f3a20002f6c02b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93085cb3914d86a0c150ed9dd35dc99d122efba53b3123d7daa107a89f0423c3"} {"level":"info","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"757b7f1578aeea5557e71e4b83b3d1eb1b31283d3945de1424f3a20002f6c02b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93085cb3914d86a0c150ed9dd35dc99d122efba53b3123d7daa107a89f0423c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93085cb3914d86a0c150ed9dd35dc99d122efba53b3123d7daa107a89f0423c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/757b7f1578aeea5557e71e4b83b3d1eb1b31283d3945de1424f3a20002f6c02b"} {"level":"info","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93085cb3914d86a0c150ed9dd35dc99d122efba53b3123d7daa107a89f0423c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"757b7f1578aeea5557e71e4b83b3d1eb1b31283d3945de1424f3a20002f6c02b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["757b7f1578aeea5557e71e4b83b3d1eb1b31283d3945de1424f3a20002f6c02b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93085cb3914d86a0c150ed9dd35dc99d122efba53b3123d7daa107a89f0423c3"} {"level":"info","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"757b7f1578aeea5557e71e4b83b3d1eb1b31283d3945de1424f3a20002f6c02b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93085cb3914d86a0c150ed9dd35dc99d122efba53b3123d7daa107a89f0423c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"757b7f1578aeea5557e71e4b83b3d1eb1b31283d3945de1424f3a20002f6c02b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/757b7f1578aeea5557e71e4b83b3d1eb1b31283d3945de1424f3a20002f6c02b"} {"level":"info","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"757b7f1578aeea5557e71e4b83b3d1eb1b31283d3945de1424f3a20002f6c02b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"757b7f1578aeea5557e71e4b83b3d1eb1b31283d3945de1424f3a20002f6c02b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["757b7f1578aeea5557e71e4b83b3d1eb1b31283d3945de1424f3a20002f6c02b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"757b7f1578aeea5557e71e4b83b3d1eb1b31283d3945de1424f3a20002f6c02b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e15befba51f6baefae71b2c94d844213d10b047e6b9ceea2748c5fb1f78df234","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93085cb3914d86a0c150ed9dd35dc99d122efba53b3123d7daa107a89f0423c3"} {"level":"info","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e15befba51f6baefae71b2c94d844213d10b047e6b9ceea2748c5fb1f78df234","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"757b7f1578aeea5557e71e4b83b3d1eb1b31283d3945de1424f3a20002f6c02b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"757b7f1578aeea5557e71e4b83b3d1eb1b31283d3945de1424f3a20002f6c02b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e15befba51f6baefae71b2c94d844213d10b047e6b9ceea2748c5fb1f78df234","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"757b7f1578aeea5557e71e4b83b3d1eb1b31283d3945de1424f3a20002f6c02b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"757b7f1578aeea5557e71e4b83b3d1eb1b31283d3945de1424f3a20002f6c02b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e15befba51f6baefae71b2c94d844213d10b047e6b9ceea2748c5fb1f78df234","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/757b7f1578aeea5557e71e4b83b3d1eb1b31283d3945de1424f3a20002f6c02b"} {"level":"debug","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"757b7f1578aeea5557e71e4b83b3d1eb1b31283d3945de1424f3a20002f6c02b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["757b7f1578aeea5557e71e4b83b3d1eb1b31283d3945de1424f3a20002f6c02b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e15befba51f6baefae71b2c94d844213d10b047e6b9ceea2748c5fb1f78df234"} {"level":"info","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"757b7f1578aeea5557e71e4b83b3d1eb1b31283d3945de1424f3a20002f6c02b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e15befba51f6baefae71b2c94d844213d10b047e6b9ceea2748c5fb1f78df234","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e15befba51f6baefae71b2c94d844213d10b047e6b9ceea2748c5fb1f78df234"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/757b7f1578aeea5557e71e4b83b3d1eb1b31283d3945de1424f3a20002f6c02b"} {"level":"info","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e15befba51f6baefae71b2c94d844213d10b047e6b9ceea2748c5fb1f78df234","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"757b7f1578aeea5557e71e4b83b3d1eb1b31283d3945de1424f3a20002f6c02b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"757b7f1578aeea5557e71e4b83b3d1eb1b31283d3945de1424f3a20002f6c02b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e15befba51f6baefae71b2c94d844213d10b047e6b9ceea2748c5fb1f78df234","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"757b7f1578aeea5557e71e4b83b3d1eb1b31283d3945de1424f3a20002f6c02b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"757b7f1578aeea5557e71e4b83b3d1eb1b31283d3945de1424f3a20002f6c02b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/757b7f1578aeea5557e71e4b83b3d1eb1b31283d3945de1424f3a20002f6c02b"} {"level":"debug","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"757b7f1578aeea5557e71e4b83b3d1eb1b31283d3945de1424f3a20002f6c02b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["757b7f1578aeea5557e71e4b83b3d1eb1b31283d3945de1424f3a20002f6c02b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e15befba51f6baefae71b2c94d844213d10b047e6b9ceea2748c5fb1f78df234"} {"level":"info","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"757b7f1578aeea5557e71e4b83b3d1eb1b31283d3945de1424f3a20002f6c02b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"757b7f1578aeea5557e71e4b83b3d1eb1b31283d3945de1424f3a20002f6c02b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/757b7f1578aeea5557e71e4b83b3d1eb1b31283d3945de1424f3a20002f6c02b"} {"level":"info","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"757b7f1578aeea5557e71e4b83b3d1eb1b31283d3945de1424f3a20002f6c02b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"757b7f1578aeea5557e71e4b83b3d1eb1b31283d3945de1424f3a20002f6c02b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"757b7f1578aeea5557e71e4b83b3d1eb1b31283d3945de1424f3a20002f6c02b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a49f1bbbcd2deda6b0ed0c52e5d7724ece155297740749e4c0dbbe05a5a18b75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/757b7f1578aeea5557e71e4b83b3d1eb1b31283d3945de1424f3a20002f6c02b"} {"level":"info","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a49f1bbbcd2deda6b0ed0c52e5d7724ece155297740749e4c0dbbe05a5a18b75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"757b7f1578aeea5557e71e4b83b3d1eb1b31283d3945de1424f3a20002f6c02b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["757b7f1578aeea5557e71e4b83b3d1eb1b31283d3945de1424f3a20002f6c02b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a49f1bbbcd2deda6b0ed0c52e5d7724ece155297740749e4c0dbbe05a5a18b75"} {"level":"info","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"757b7f1578aeea5557e71e4b83b3d1eb1b31283d3945de1424f3a20002f6c02b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a49f1bbbcd2deda6b0ed0c52e5d7724ece155297740749e4c0dbbe05a5a18b75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a49f1bbbcd2deda6b0ed0c52e5d7724ece155297740749e4c0dbbe05a5a18b75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a49f1bbbcd2deda6b0ed0c52e5d7724ece155297740749e4c0dbbe05a5a18b75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"757b7f1578aeea5557e71e4b83b3d1eb1b31283d3945de1424f3a20002f6c02b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/757b7f1578aeea5557e71e4b83b3d1eb1b31283d3945de1424f3a20002f6c02b"} {"level":"info","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"757b7f1578aeea5557e71e4b83b3d1eb1b31283d3945de1424f3a20002f6c02b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a49f1bbbcd2deda6b0ed0c52e5d7724ece155297740749e4c0dbbe05a5a18b75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a49f1bbbcd2deda6b0ed0c52e5d7724ece155297740749e4c0dbbe05a5a18b75"} {"level":"info","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a49f1bbbcd2deda6b0ed0c52e5d7724ece155297740749e4c0dbbe05a5a18b75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"757b7f1578aeea5557e71e4b83b3d1eb1b31283d3945de1424f3a20002f6c02b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a49f1bbbcd2deda6b0ed0c52e5d7724ece155297740749e4c0dbbe05a5a18b75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a49f1bbbcd2deda6b0ed0c52e5d7724ece155297740749e4c0dbbe05a5a18b75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/757b7f1578aeea5557e71e4b83b3d1eb1b31283d3945de1424f3a20002f6c02b"} {"level":"info","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a49f1bbbcd2deda6b0ed0c52e5d7724ece155297740749e4c0dbbe05a5a18b75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"757b7f1578aeea5557e71e4b83b3d1eb1b31283d3945de1424f3a20002f6c02b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["757b7f1578aeea5557e71e4b83b3d1eb1b31283d3945de1424f3a20002f6c02b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a49f1bbbcd2deda6b0ed0c52e5d7724ece155297740749e4c0dbbe05a5a18b75"} {"level":"info","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"757b7f1578aeea5557e71e4b83b3d1eb1b31283d3945de1424f3a20002f6c02b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a49f1bbbcd2deda6b0ed0c52e5d7724ece155297740749e4c0dbbe05a5a18b75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a49f1bbbcd2deda6b0ed0c52e5d7724ece155297740749e4c0dbbe05a5a18b75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"757b7f1578aeea5557e71e4b83b3d1eb1b31283d3945de1424f3a20002f6c02b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a49f1bbbcd2deda6b0ed0c52e5d7724ece155297740749e4c0dbbe05a5a18b75"} {"level":"debug","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a49f1bbbcd2deda6b0ed0c52e5d7724ece155297740749e4c0dbbe05a5a18b75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a49f1bbbcd2deda6b0ed0c52e5d7724ece155297740749e4c0dbbe05a5a18b75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a49f1bbbcd2deda6b0ed0c52e5d7724ece155297740749e4c0dbbe05a5a18b75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a49f1bbbcd2deda6b0ed0c52e5d7724ece155297740749e4c0dbbe05a5a18b75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a49f1bbbcd2deda6b0ed0c52e5d7724ece155297740749e4c0dbbe05a5a18b75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/757b7f1578aeea5557e71e4b83b3d1eb1b31283d3945de1424f3a20002f6c02b"} {"level":"error","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a49f1bbbcd2deda6b0ed0c52e5d7724ece155297740749e4c0dbbe05a5a18b75","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a49f1bbbcd2deda6b0ed0c52e5d7724ece155297740749e4c0dbbe05a5a18b75\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a49f1bbbcd2deda6b0ed0c52e5d7724ece155297740749e4c0dbbe05a5a18b75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a49f1bbbcd2deda6b0ed0c52e5d7724ece155297740749e4c0dbbe05a5a18b75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a49f1bbbcd2deda6b0ed0c52e5d7724ece155297740749e4c0dbbe05a5a18b75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a49f1bbbcd2deda6b0ed0c52e5d7724ece155297740749e4c0dbbe05a5a18b75"} {"level":"error","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a49f1bbbcd2deda6b0ed0c52e5d7724ece155297740749e4c0dbbe05a5a18b75","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a49f1bbbcd2deda6b0ed0c52e5d7724ece155297740749e4c0dbbe05a5a18b75\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a49f1bbbcd2deda6b0ed0c52e5d7724ece155297740749e4c0dbbe05a5a18b75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a49f1bbbcd2deda6b0ed0c52e5d7724ece155297740749e4c0dbbe05a5a18b75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a49f1bbbcd2deda6b0ed0c52e5d7724ece155297740749e4c0dbbe05a5a18b75"} {"level":"info","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96"} {"level":"info","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96"} {"level":"info","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96"} {"level":"debug","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a49f1bbbcd2deda6b0ed0c52e5d7724ece155297740749e4c0dbbe05a5a18b75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a49f1bbbcd2deda6b0ed0c52e5d7724ece155297740749e4c0dbbe05a5a18b75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a49f1bbbcd2deda6b0ed0c52e5d7724ece155297740749e4c0dbbe05a5a18b75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a49f1bbbcd2deda6b0ed0c52e5d7724ece155297740749e4c0dbbe05a5a18b75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a49f1bbbcd2deda6b0ed0c52e5d7724ece155297740749e4c0dbbe05a5a18b75","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a49f1bbbcd2deda6b0ed0c52e5d7724ece155297740749e4c0dbbe05a5a18b75"} {"level":"debug","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a49f1bbbcd2deda6b0ed0c52e5d7724ece155297740749e4c0dbbe05a5a18b75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a49f1bbbcd2deda6b0ed0c52e5d7724ece155297740749e4c0dbbe05a5a18b75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a49f1bbbcd2deda6b0ed0c52e5d7724ece155297740749e4c0dbbe05a5a18b75"} {"level":"debug","ts":"2026-07-17T14:41:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a49f1bbbcd2deda6b0ed0c52e5d7724ece155297740749e4c0dbbe05a5a18b75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:41:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a49f1bbbcd2deda6b0ed0c52e5d7724ece155297740749e4c0dbbe05a5a18b75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96"} {"level":"info","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a49f1bbbcd2deda6b0ed0c52e5d7724ece155297740749e4c0dbbe05a5a18b75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a49f1bbbcd2deda6b0ed0c52e5d7724ece155297740749e4c0dbbe05a5a18b75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:41:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:41:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a49f1bbbcd2deda6b0ed0c52e5d7724ece155297740749e4c0dbbe05a5a18b75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a49f1bbbcd2deda6b0ed0c52e5d7724ece155297740749e4c0dbbe05a5a18b75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a49f1bbbcd2deda6b0ed0c52e5d7724ece155297740749e4c0dbbe05a5a18b75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:41:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:41:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a49f1bbbcd2deda6b0ed0c52e5d7724ece155297740749e4c0dbbe05a5a18b75"} {"level":"info","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:41:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:41:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3"} {"level":"info","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a49f1bbbcd2deda6b0ed0c52e5d7724ece155297740749e4c0dbbe05a5a18b75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:41:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:41:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:41:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:41:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a49f1bbbcd2deda6b0ed0c52e5d7724ece155297740749e4c0dbbe05a5a18b75"} {"level":"info","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:41:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:41:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3"} {"level":"info","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a49f1bbbcd2deda6b0ed0c52e5d7724ece155297740749e4c0dbbe05a5a18b75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:41:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:41:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a49f1bbbcd2deda6b0ed0c52e5d7724ece155297740749e4c0dbbe05a5a18b75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3"} {"level":"info","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a49f1bbbcd2deda6b0ed0c52e5d7724ece155297740749e4c0dbbe05a5a18b75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a49f1bbbcd2deda6b0ed0c52e5d7724ece155297740749e4c0dbbe05a5a18b75","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3"} {"level":"debug","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:41:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:41:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a49f1bbbcd2deda6b0ed0c52e5d7724ece155297740749e4c0dbbe05a5a18b75"} {"level":"info","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3"} {"level":"debug","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:41:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:41:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b564ebe9e9d87f40a0f3dac52e7e9e87250da6526fbc6ba3e71b71428938b9e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:41:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:41:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126"} {"level":"info","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b564ebe9e9d87f40a0f3dac52e7e9e87250da6526fbc6ba3e71b71428938b9e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:41:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:41:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b564ebe9e9d87f40a0f3dac52e7e9e87250da6526fbc6ba3e71b71428938b9e5"} {"level":"info","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b564ebe9e9d87f40a0f3dac52e7e9e87250da6526fbc6ba3e71b71428938b9e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:41:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:41:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b564ebe9e9d87f40a0f3dac52e7e9e87250da6526fbc6ba3e71b71428938b9e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126"} {"level":"info","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b564ebe9e9d87f40a0f3dac52e7e9e87250da6526fbc6ba3e71b71428938b9e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b564ebe9e9d87f40a0f3dac52e7e9e87250da6526fbc6ba3e71b71428938b9e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:41:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:41:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b564ebe9e9d87f40a0f3dac52e7e9e87250da6526fbc6ba3e71b71428938b9e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b564ebe9e9d87f40a0f3dac52e7e9e87250da6526fbc6ba3e71b71428938b9e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:41:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:41:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b564ebe9e9d87f40a0f3dac52e7e9e87250da6526fbc6ba3e71b71428938b9e5"} {"level":"error","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b564ebe9e9d87f40a0f3dac52e7e9e87250da6526fbc6ba3e71b71428938b9e5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b564ebe9e9d87f40a0f3dac52e7e9e87250da6526fbc6ba3e71b71428938b9e5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d4841ad90771291a475e61962e1ea525a372ec4185e1520890eb3a8f9e8d02f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:41:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:41:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d4841ad90771291a475e61962e1ea525a372ec4185e1520890eb3a8f9e8d02f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b564ebe9e9d87f40a0f3dac52e7e9e87250da6526fbc6ba3e71b71428938b9e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:41:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:41:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b564ebe9e9d87f40a0f3dac52e7e9e87250da6526fbc6ba3e71b71428938b9e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b564ebe9e9d87f40a0f3dac52e7e9e87250da6526fbc6ba3e71b71428938b9e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d4841ad90771291a475e61962e1ea525a372ec4185e1520890eb3a8f9e8d02f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b564ebe9e9d87f40a0f3dac52e7e9e87250da6526fbc6ba3e71b71428938b9e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d4841ad90771291a475e61962e1ea525a372ec4185e1520890eb3a8f9e8d02f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126"} {"level":"debug","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d4841ad90771291a475e61962e1ea525a372ec4185e1520890eb3a8f9e8d02f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:41:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:41:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d4841ad90771291a475e61962e1ea525a372ec4185e1520890eb3a8f9e8d02f"} {"level":"info","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d4841ad90771291a475e61962e1ea525a372ec4185e1520890eb3a8f9e8d02f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d4841ad90771291a475e61962e1ea525a372ec4185e1520890eb3a8f9e8d02f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:41:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:41:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d4841ad90771291a475e61962e1ea525a372ec4185e1520890eb3a8f9e8d02f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b564ebe9e9d87f40a0f3dac52e7e9e87250da6526fbc6ba3e71b71428938b9e5"} {"level":"info","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d4841ad90771291a475e61962e1ea525a372ec4185e1520890eb3a8f9e8d02f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40d1575c6c82b66e9c3026ed6a334ceb1940e554b21fb4bacb3c312691407b82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:41:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:41:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d4841ad90771291a475e61962e1ea525a372ec4185e1520890eb3a8f9e8d02f"} {"level":"info","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40d1575c6c82b66e9c3026ed6a334ceb1940e554b21fb4bacb3c312691407b82"} {"level":"info","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d4841ad90771291a475e61962e1ea525a372ec4185e1520890eb3a8f9e8d02f"} {"level":"info","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40d1575c6c82b66e9c3026ed6a334ceb1940e554b21fb4bacb3c312691407b82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d4841ad90771291a475e61962e1ea525a372ec4185e1520890eb3a8f9e8d02f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40d1575c6c82b66e9c3026ed6a334ceb1940e554b21fb4bacb3c312691407b82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:41:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:41:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40d1575c6c82b66e9c3026ed6a334ceb1940e554b21fb4bacb3c312691407b82"} {"level":"info","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40d1575c6c82b66e9c3026ed6a334ceb1940e554b21fb4bacb3c312691407b82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8227989ee3624badb2c3c93a80e704489ff501900f7cb592436692c88fccb9c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:41:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:41:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8227989ee3624badb2c3c93a80e704489ff501900f7cb592436692c88fccb9c9"} {"level":"info","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861"} {"level":"info","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40d1575c6c82b66e9c3026ed6a334ceb1940e554b21fb4bacb3c312691407b82"} {"level":"info","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8227989ee3624badb2c3c93a80e704489ff501900f7cb592436692c88fccb9c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:41:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:41:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f539dd98c58a79d18b45bebac45bb607a6eff6d7a06c7e1c8cf431367091f227"} {"level":"info","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8227989ee3624badb2c3c93a80e704489ff501900f7cb592436692c88fccb9c9"} {"level":"info","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40d1575c6c82b66e9c3026ed6a334ceb1940e554b21fb4bacb3c312691407b82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:41:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:41:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40d1575c6c82b66e9c3026ed6a334ceb1940e554b21fb4bacb3c312691407b82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9af40badfdddecd71921886d8c967922fad1c02538c62648762bce9b056dd011"} {"level":"info","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/741c45ef204a2eae8b9c876fb2b9b4d1255292d2c93c500b24421defdcf0239f"} {"level":"info","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861"} {"level":"info","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40d1575c6c82b66e9c3026ed6a334ceb1940e554b21fb4bacb3c312691407b82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f539dd98c58a79d18b45bebac45bb607a6eff6d7a06c7e1c8cf431367091f227","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:41:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:41:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f539dd98c58a79d18b45bebac45bb607a6eff6d7a06c7e1c8cf431367091f227"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7a003b17c319dee0659bb144408066ba779b0ed09344eb4963c4cb3e9bdfe5a"} {"level":"info","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04f5509afa3bb7abc9322fecd3ccc3b1dae766172ea77e1789bde47971712391"} {"level":"info","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9a9673d41f2de079fe25aeb77889a2054753385a477ec9d8c0e96179d8f04c5"} {"level":"info","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f539dd98c58a79d18b45bebac45bb607a6eff6d7a06c7e1c8cf431367091f227","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8227989ee3624badb2c3c93a80e704489ff501900f7cb592436692c88fccb9c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:41:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:41:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8227989ee3624badb2c3c93a80e704489ff501900f7cb592436692c88fccb9c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40d1575c6c82b66e9c3026ed6a334ceb1940e554b21fb4bacb3c312691407b82"} {"level":"info","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97da23d9d69e8861b9bfa35354f04c38c4ec02d0252ef054af0d94ceba4ffd9b"} {"level":"info","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8227989ee3624badb2c3c93a80e704489ff501900f7cb592436692c88fccb9c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9af40badfdddecd71921886d8c967922fad1c02538c62648762bce9b056dd011","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:41:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:41:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9af40badfdddecd71921886d8c967922fad1c02538c62648762bce9b056dd011"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74b3bded818f06040ce20b1d79095391d2ed6347a6636f6a93da423fdbf8fdda"} {"level":"info","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f539dd98c58a79d18b45bebac45bb607a6eff6d7a06c7e1c8cf431367091f227"} {"level":"info","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9af40badfdddecd71921886d8c967922fad1c02538c62648762bce9b056dd011","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"741c45ef204a2eae8b9c876fb2b9b4d1255292d2c93c500b24421defdcf0239f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:41:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:41:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["741c45ef204a2eae8b9c876fb2b9b4d1255292d2c93c500b24421defdcf0239f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b025fd4844459bf98ee0ffee795e88d5a9b31a90e0af0ebb0e5b094afc807df"} {"level":"info","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecab2a53055ccc026cfe7238b2bc2570cdcf8ccfddad579e7edc1de8f2a2e030"} {"level":"info","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e0c3374582166a62df8f7974c43a79f99677c516bc947e8b76a2db0cadec1d6"} {"level":"info","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"741c45ef204a2eae8b9c876fb2b9b4d1255292d2c93c500b24421defdcf0239f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7a003b17c319dee0659bb144408066ba779b0ed09344eb4963c4cb3e9bdfe5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:41:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:41:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7a003b17c319dee0659bb144408066ba779b0ed09344eb4963c4cb3e9bdfe5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8227989ee3624badb2c3c93a80e704489ff501900f7cb592436692c88fccb9c9"} {"level":"info","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9af40badfdddecd71921886d8c967922fad1c02538c62648762bce9b056dd011"} {"level":"info","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7a003b17c319dee0659bb144408066ba779b0ed09344eb4963c4cb3e9bdfe5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04f5509afa3bb7abc9322fecd3ccc3b1dae766172ea77e1789bde47971712391","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:41:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:41:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04f5509afa3bb7abc9322fecd3ccc3b1dae766172ea77e1789bde47971712391"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/741c45ef204a2eae8b9c876fb2b9b4d1255292d2c93c500b24421defdcf0239f"} {"level":"info","ts":"2026-07-17T14:41:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7a003b17c319dee0659bb144408066ba779b0ed09344eb4963c4cb3e9bdfe5a"} {"level":"info","ts":"2026-07-17T14:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04f5509afa3bb7abc9322fecd3ccc3b1dae766172ea77e1789bde47971712391","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9a9673d41f2de079fe25aeb77889a2054753385a477ec9d8c0e96179d8f04c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:41:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:41:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9a9673d41f2de079fe25aeb77889a2054753385a477ec9d8c0e96179d8f04c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04f5509afa3bb7abc9322fecd3ccc3b1dae766172ea77e1789bde47971712391"} {"level":"info","ts":"2026-07-17T14:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9a9673d41f2de079fe25aeb77889a2054753385a477ec9d8c0e96179d8f04c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40d1575c6c82b66e9c3026ed6a334ceb1940e554b21fb4bacb3c312691407b82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97da23d9d69e8861b9bfa35354f04c38c4ec02d0252ef054af0d94ceba4ffd9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:41:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:41:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97da23d9d69e8861b9bfa35354f04c38c4ec02d0252ef054af0d94ceba4ffd9b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9a9673d41f2de079fe25aeb77889a2054753385a477ec9d8c0e96179d8f04c5"} {"level":"info","ts":"2026-07-17T14:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97da23d9d69e8861b9bfa35354f04c38c4ec02d0252ef054af0d94ceba4ffd9b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74b3bded818f06040ce20b1d79095391d2ed6347a6636f6a93da423fdbf8fdda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:41:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:41:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74b3bded818f06040ce20b1d79095391d2ed6347a6636f6a93da423fdbf8fdda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97da23d9d69e8861b9bfa35354f04c38c4ec02d0252ef054af0d94ceba4ffd9b"} {"level":"info","ts":"2026-07-17T14:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74b3bded818f06040ce20b1d79095391d2ed6347a6636f6a93da423fdbf8fdda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f539dd98c58a79d18b45bebac45bb607a6eff6d7a06c7e1c8cf431367091f227","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b025fd4844459bf98ee0ffee795e88d5a9b31a90e0af0ebb0e5b094afc807df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:41:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:41:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b025fd4844459bf98ee0ffee795e88d5a9b31a90e0af0ebb0e5b094afc807df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74b3bded818f06040ce20b1d79095391d2ed6347a6636f6a93da423fdbf8fdda"} {"level":"info","ts":"2026-07-17T14:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b025fd4844459bf98ee0ffee795e88d5a9b31a90e0af0ebb0e5b094afc807df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecab2a53055ccc026cfe7238b2bc2570cdcf8ccfddad579e7edc1de8f2a2e030","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:41:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:41:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ecab2a53055ccc026cfe7238b2bc2570cdcf8ccfddad579e7edc1de8f2a2e030"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b025fd4844459bf98ee0ffee795e88d5a9b31a90e0af0ebb0e5b094afc807df"} {"level":"info","ts":"2026-07-17T14:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecab2a53055ccc026cfe7238b2bc2570cdcf8ccfddad579e7edc1de8f2a2e030","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e0c3374582166a62df8f7974c43a79f99677c516bc947e8b76a2db0cadec1d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:41:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:41:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e0c3374582166a62df8f7974c43a79f99677c516bc947e8b76a2db0cadec1d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecab2a53055ccc026cfe7238b2bc2570cdcf8ccfddad579e7edc1de8f2a2e030"} {"level":"info","ts":"2026-07-17T14:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e0c3374582166a62df8f7974c43a79f99677c516bc947e8b76a2db0cadec1d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8227989ee3624badb2c3c93a80e704489ff501900f7cb592436692c88fccb9c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9af40badfdddecd71921886d8c967922fad1c02538c62648762bce9b056dd011","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"741c45ef204a2eae8b9c876fb2b9b4d1255292d2c93c500b24421defdcf0239f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7a003b17c319dee0659bb144408066ba779b0ed09344eb4963c4cb3e9bdfe5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04f5509afa3bb7abc9322fecd3ccc3b1dae766172ea77e1789bde47971712391","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9a9673d41f2de079fe25aeb77889a2054753385a477ec9d8c0e96179d8f04c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97da23d9d69e8861b9bfa35354f04c38c4ec02d0252ef054af0d94ceba4ffd9b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74b3bded818f06040ce20b1d79095391d2ed6347a6636f6a93da423fdbf8fdda","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b025fd4844459bf98ee0ffee795e88d5a9b31a90e0af0ebb0e5b094afc807df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ecab2a53055ccc026cfe7238b2bc2570cdcf8ccfddad579e7edc1de8f2a2e030","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e0c3374582166a62df8f7974c43a79f99677c516bc947e8b76a2db0cadec1d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:41:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:41:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e0c3374582166a62df8f7974c43a79f99677c516bc947e8b76a2db0cadec1d6"} {"level":"info","ts":"2026-07-17T14:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e0c3374582166a62df8f7974c43a79f99677c516bc947e8b76a2db0cadec1d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e0c3374582166a62df8f7974c43a79f99677c516bc947e8b76a2db0cadec1d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e0c3374582166a62df8f7974c43a79f99677c516bc947e8b76a2db0cadec1d6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e0c3374582166a62df8f7974c43a79f99677c516bc947e8b76a2db0cadec1d6"} {"level":"debug","ts":"2026-07-17T14:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e0c3374582166a62df8f7974c43a79f99677c516bc947e8b76a2db0cadec1d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:41:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:41:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e0c3374582166a62df8f7974c43a79f99677c516bc947e8b76a2db0cadec1d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e0c3374582166a62df8f7974c43a79f99677c516bc947e8b76a2db0cadec1d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e0c3374582166a62df8f7974c43a79f99677c516bc947e8b76a2db0cadec1d6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e0c3374582166a62df8f7974c43a79f99677c516bc947e8b76a2db0cadec1d6"} {"level":"info","ts":"2026-07-17T14:41:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"edddb3ca-fe89-4155-a0ed-decac294818c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:36062","PortSpecifier":{"PortValue":36062}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.101:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"edddb3ca-fe89-4155-a0ed-decac294818c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-244a73.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T14:41:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"edddb3ca-fe89-4155-a0ed-decac294818c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:36062","PortSpecifier":{"PortValue":36062}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.101:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784299299,"nanos":932996252},"http":{"id":"edddb3ca-fe89-4155-a0ed-decac294818c","method":"POST","headers":{":authority":"e2e-shared-a-244a73.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T14:41:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"edddb3ca-fe89-4155-a0ed-decac294818c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T14:41:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"edddb3ca-fe89-4155-a0ed-decac294818c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"de491402-0b93-4648-a022-505c097cd610","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e645c696-460f-41b3-b391-2e55602b163a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c3765a88c95"]}} {"level":"debug","ts":"2026-07-17T14:41:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"edddb3ca-fe89-4155-a0ed-decac294818c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c3765a88c95"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e645c696-460f-41b3-b391-2e55602b163a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de491402-0b93-4648-a022-505c097cd610","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b9a9673d41f2de079fe25aeb77889a2054753385a477ec9d8c0e96179d8f04c5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.101:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-244a73.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T14:41:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"edddb3ca-fe89-4155-a0ed-decac294818c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:41:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"edddb3ca-fe89-4155-a0ed-decac294818c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:41:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"edddb3ca-fe89-4155-a0ed-decac294818c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-244a73/sub-test-model-244a73\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-244a73/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:41:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"edddb3ca-fe89-4155-a0ed-decac294818c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T14:41:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"edddb3ca-fe89-4155-a0ed-decac294818c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T14:41:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"edddb3ca-fe89-4155-a0ed-decac294818c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T14:41:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"edddb3ca-fe89-4155-a0ed-decac294818c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T14:41:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"edddb3ca-fe89-4155-a0ed-decac294818c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T14:41:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8f765cad-f1f4-4340-add2-fea52ab4d720","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:41698","PortSpecifier":{"PortValue":41698}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.102:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8f765cad-f1f4-4340-add2-fea52ab4d720","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-9eb655.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T14:41:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8f765cad-f1f4-4340-add2-fea52ab4d720","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:41698","PortSpecifier":{"PortValue":41698}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.102:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784299299,"nanos":971894058},"http":{"id":"8f765cad-f1f4-4340-add2-fea52ab4d720","method":"POST","headers":{":authority":"e2e-shared-b-9eb655.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T14:41:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8f765cad-f1f4-4340-add2-fea52ab4d720","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T14:41:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8f765cad-f1f4-4340-add2-fea52ab4d720","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"de491402-0b93-4648-a022-505c097cd610","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e645c696-460f-41b3-b391-2e55602b163a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c3765a88c95"]}} {"level":"debug","ts":"2026-07-17T14:41:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8f765cad-f1f4-4340-add2-fea52ab4d720","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c3765a88c95"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e645c696-460f-41b3-b391-2e55602b163a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de491402-0b93-4648-a022-505c097cd610","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.102:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-9eb655.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T14:41:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f765cad-f1f4-4340-add2-fea52ab4d720","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:41:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f765cad-f1f4-4340-add2-fea52ab4d720","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:41:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f765cad-f1f4-4340-add2-fea52ab4d720","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-9eb655/sub-test-model-9eb655\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-9eb655/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:41:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8f765cad-f1f4-4340-add2-fea52ab4d720","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T14:41:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f765cad-f1f4-4340-add2-fea52ab4d720","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T14:41:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f765cad-f1f4-4340-add2-fea52ab4d720","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T14:41:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8f765cad-f1f4-4340-add2-fea52ab4d720","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T14:41:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8f765cad-f1f4-4340-add2-fea52ab4d720","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T14:41:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c06f6fc8-a0d0-4ed7-bce4-2465600c2bad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:36074","PortSpecifier":{"PortValue":36074}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.101:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c06f6fc8-a0d0-4ed7-bce4-2465600c2bad","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-244a73.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T14:41:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c06f6fc8-a0d0-4ed7-bce4-2465600c2bad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:36074","PortSpecifier":{"PortValue":36074}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.101:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784299300,"nanos":8760780},"http":{"id":"c06f6fc8-a0d0-4ed7-bce4-2465600c2bad","method":"GET","headers":{":authority":"e2e-shared-a-244a73.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T14:41:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c06f6fc8-a0d0-4ed7-bce4-2465600c2bad","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Rb7ioG9G6W7v3UzP_jZ6If7rScvDL64F4Awo8Oxqkf9r6JPAr4sB2qS3ZqKn"} {"level":"debug","ts":"2026-07-17T14:41:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c06f6fc8-a0d0-4ed7-bce4-2465600c2bad","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-244a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Rb7ioG9G6W7v3UzP_jZ6If7rScvDL64F4Awo8Oxqkf9r6JPAr4sB2qS3ZqKn\"}"} {"level":"debug","ts":"2026-07-17T14:41:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c06f6fc8-a0d0-4ed7-bce4-2465600c2bad","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-244a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"23ed3d92-0762-40f0-8c12-4bc016543f5f","keyName":"e2e-sub-iso-40426f","subscription":"e2e-a-only-3008dc","tenant":"e2e-shared-a-244a73","userId":"23ed3d92-0762-40f0-8c12-4bc016543f5f","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T14:41:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c06f6fc8-a0d0-4ed7-bce4-2465600c2bad","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T14:41:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c06f6fc8-a0d0-4ed7-bce4-2465600c2bad","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:41:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c06f6fc8-a0d0-4ed7-bce4-2465600c2bad","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:41:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c06f6fc8-a0d0-4ed7-bce4-2465600c2bad","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-244a73/sub-test-model-244a73\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-244a73/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:41:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c06f6fc8-a0d0-4ed7-bce4-2465600c2bad","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-17T14:41:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c06f6fc8-a0d0-4ed7-bce4-2465600c2bad","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-3008dc"} {"level":"debug","ts":"2026-07-17T14:41:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c06f6fc8-a0d0-4ed7-bce4-2465600c2bad","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T14:41:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c06f6fc8-a0d0-4ed7-bce4-2465600c2bad","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-17T14:41:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c06f6fc8-a0d0-4ed7-bce4-2465600c2bad","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T14:41:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c06f6fc8-a0d0-4ed7-bce4-2465600c2bad","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T14:41:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"90a4d3ba-dea1-4ecd-9659-6dfb4b02644e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:41712","PortSpecifier":{"PortValue":41712}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.102:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"90a4d3ba-dea1-4ecd-9659-6dfb4b02644e","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-9eb655.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T14:41:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"90a4d3ba-dea1-4ecd-9659-6dfb4b02644e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:41712","PortSpecifier":{"PortValue":41712}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.102:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784299300,"nanos":36881370},"http":{"id":"90a4d3ba-dea1-4ecd-9659-6dfb4b02644e","method":"GET","headers":{":authority":"e2e-shared-b-9eb655.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T14:41:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"90a4d3ba-dea1-4ecd-9659-6dfb4b02644e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-nljBnh37k9PKRY6G_EIWlllMeV9jKhKuvGWWlvj6YnJaAXOqYb6EKxzwuAXj"} {"level":"debug","ts":"2026-07-17T14:41:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"90a4d3ba-dea1-4ecd-9659-6dfb4b02644e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-9eb655.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-nljBnh37k9PKRY6G_EIWlllMeV9jKhKuvGWWlvj6YnJaAXOqYb6EKxzwuAXj\"}"} {"level":"debug","ts":"2026-07-17T14:41:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"90a4d3ba-dea1-4ecd-9659-6dfb4b02644e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-9eb655.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"568a5a12-87cd-411a-aee8-c08fd81c081e","keyName":"e2e-sub-iso-f28c4c","subscription":"e2e-b-only-3008dc","tenant":"e2e-shared-b-9eb655","userId":"568a5a12-87cd-411a-aee8-c08fd81c081e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T14:41:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"90a4d3ba-dea1-4ecd-9659-6dfb4b02644e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T14:41:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"90a4d3ba-dea1-4ecd-9659-6dfb4b02644e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:41:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"90a4d3ba-dea1-4ecd-9659-6dfb4b02644e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:41:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"90a4d3ba-dea1-4ecd-9659-6dfb4b02644e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-9eb655/sub-test-model-9eb655\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-9eb655/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:41:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"90a4d3ba-dea1-4ecd-9659-6dfb4b02644e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T14:41:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"90a4d3ba-dea1-4ecd-9659-6dfb4b02644e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-3008dc"} {"level":"debug","ts":"2026-07-17T14:41:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"90a4d3ba-dea1-4ecd-9659-6dfb4b02644e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T14:41:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"90a4d3ba-dea1-4ecd-9659-6dfb4b02644e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-17T14:41:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"90a4d3ba-dea1-4ecd-9659-6dfb4b02644e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T14:41:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"90a4d3ba-dea1-4ecd-9659-6dfb4b02644e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T14:41:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"851169c4-3764-4137-b1e7-40a37ab0b9da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:46754","PortSpecifier":{"PortValue":46754}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.101:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"851169c4-3764-4137-b1e7-40a37ab0b9da","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-244a73.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T14:41:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"851169c4-3764-4137-b1e7-40a37ab0b9da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:46754","PortSpecifier":{"PortValue":46754}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.101:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784299310,"nanos":310063091},"http":{"id":"851169c4-3764-4137-b1e7-40a37ab0b9da","method":"POST","headers":{":authority":"e2e-shared-a-244a73.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T14:41:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"851169c4-3764-4137-b1e7-40a37ab0b9da","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T14:41:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"851169c4-3764-4137-b1e7-40a37ab0b9da","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"de491402-0b93-4648-a022-505c097cd610","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e645c696-460f-41b3-b391-2e55602b163a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c3765a88c95"]}} {"level":"debug","ts":"2026-07-17T14:41:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"851169c4-3764-4137-b1e7-40a37ab0b9da","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c3765a88c95"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e645c696-460f-41b3-b391-2e55602b163a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de491402-0b93-4648-a022-505c097cd610","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b9a9673d41f2de079fe25aeb77889a2054753385a477ec9d8c0e96179d8f04c5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.101:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-244a73.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T14:41:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"851169c4-3764-4137-b1e7-40a37ab0b9da","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:41:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"851169c4-3764-4137-b1e7-40a37ab0b9da","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:41:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"851169c4-3764-4137-b1e7-40a37ab0b9da","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-244a73/sub-test-model-244a73\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-244a73/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:41:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"851169c4-3764-4137-b1e7-40a37ab0b9da","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T14:41:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"851169c4-3764-4137-b1e7-40a37ab0b9da","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T14:41:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"851169c4-3764-4137-b1e7-40a37ab0b9da","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T14:41:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"851169c4-3764-4137-b1e7-40a37ab0b9da","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T14:41:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"851169c4-3764-4137-b1e7-40a37ab0b9da","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T14:41:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b2601cb-c50e-4487-8987-dd535b94ee77","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:49270","PortSpecifier":{"PortValue":49270}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.102:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9b2601cb-c50e-4487-8987-dd535b94ee77","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-9eb655.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T14:41:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b2601cb-c50e-4487-8987-dd535b94ee77","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:49270","PortSpecifier":{"PortValue":49270}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.102:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784299310,"nanos":348206270},"http":{"id":"9b2601cb-c50e-4487-8987-dd535b94ee77","method":"POST","headers":{":authority":"e2e-shared-b-9eb655.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T14:41:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9b2601cb-c50e-4487-8987-dd535b94ee77","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T14:41:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9b2601cb-c50e-4487-8987-dd535b94ee77","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"de491402-0b93-4648-a022-505c097cd610","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e645c696-460f-41b3-b391-2e55602b163a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c3765a88c95"]}} {"level":"debug","ts":"2026-07-17T14:41:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9b2601cb-c50e-4487-8987-dd535b94ee77","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c3765a88c95"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e645c696-460f-41b3-b391-2e55602b163a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de491402-0b93-4648-a022-505c097cd610","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.102:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-9eb655.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T14:41:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b2601cb-c50e-4487-8987-dd535b94ee77","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:41:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b2601cb-c50e-4487-8987-dd535b94ee77","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:41:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b2601cb-c50e-4487-8987-dd535b94ee77","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-9eb655/sub-test-model-9eb655\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-9eb655/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:41:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9b2601cb-c50e-4487-8987-dd535b94ee77","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T14:41:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b2601cb-c50e-4487-8987-dd535b94ee77","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T14:41:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b2601cb-c50e-4487-8987-dd535b94ee77","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T14:41:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b2601cb-c50e-4487-8987-dd535b94ee77","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T14:41:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b2601cb-c50e-4487-8987-dd535b94ee77","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T14:41:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c25023e7-2026-427c-b913-ed0c9ea43a82","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:46762","PortSpecifier":{"PortValue":46762}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.101:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c25023e7-2026-427c-b913-ed0c9ea43a82","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-244a73.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T14:41:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c25023e7-2026-427c-b913-ed0c9ea43a82","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:46762","PortSpecifier":{"PortValue":46762}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.101:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784299310,"nanos":379110871},"http":{"id":"c25023e7-2026-427c-b913-ed0c9ea43a82","method":"POST","headers":{":authority":"e2e-shared-a-244a73.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T14:41:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c25023e7-2026-427c-b913-ed0c9ea43a82","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-3cvWSCqHocgiwypX_35fYAWeaxvaQ52jlhB9DnmGVnTRyKh9FGtitlh1h4X4"} {"level":"debug","ts":"2026-07-17T14:41:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c25023e7-2026-427c-b913-ed0c9ea43a82","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-244a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-3cvWSCqHocgiwypX_35fYAWeaxvaQ52jlhB9DnmGVnTRyKh9FGtitlh1h4X4\"}"} {"level":"debug","ts":"2026-07-17T14:41:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c25023e7-2026-427c-b913-ed0c9ea43a82","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-244a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6ff9a823-30f9-4bd9-a2a6-8f7008af6d8d","keyName":"e2e-sub-iso-8d9e83","subscription":"e2e-shared-sub-995748","tenant":"e2e-shared-a-244a73","userId":"6ff9a823-30f9-4bd9-a2a6-8f7008af6d8d","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T14:41:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c25023e7-2026-427c-b913-ed0c9ea43a82","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T14:41:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c25023e7-2026-427c-b913-ed0c9ea43a82","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:41:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c25023e7-2026-427c-b913-ed0c9ea43a82","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:41:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c25023e7-2026-427c-b913-ed0c9ea43a82","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-244a73/sub-test-model-244a73\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-244a73/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:41:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c25023e7-2026-427c-b913-ed0c9ea43a82","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T14:41:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c25023e7-2026-427c-b913-ed0c9ea43a82","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-17T14:41:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c25023e7-2026-427c-b913-ed0c9ea43a82","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-995748"} {"level":"debug","ts":"2026-07-17T14:41:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c25023e7-2026-427c-b913-ed0c9ea43a82","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T14:41:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c25023e7-2026-427c-b913-ed0c9ea43a82","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T14:41:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c25023e7-2026-427c-b913-ed0c9ea43a82","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T14:41:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d368e53b-e591-4626-a590-19558fc0907e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:49274","PortSpecifier":{"PortValue":49274}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.102:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d368e53b-e591-4626-a590-19558fc0907e","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-9eb655.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T14:41:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d368e53b-e591-4626-a590-19558fc0907e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:49274","PortSpecifier":{"PortValue":49274}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.102:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784299310,"nanos":409743853},"http":{"id":"d368e53b-e591-4626-a590-19558fc0907e","method":"POST","headers":{":authority":"e2e-shared-b-9eb655.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T14:41:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d368e53b-e591-4626-a590-19558fc0907e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-7ZLbL12iqdJy4MN4_2geUFwK46mFe37zmn3kuoyL9MW1LCtnUUMBGorEVxhe"} {"level":"debug","ts":"2026-07-17T14:41:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d368e53b-e591-4626-a590-19558fc0907e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-9eb655.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-7ZLbL12iqdJy4MN4_2geUFwK46mFe37zmn3kuoyL9MW1LCtnUUMBGorEVxhe\"}"} {"level":"debug","ts":"2026-07-17T14:41:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d368e53b-e591-4626-a590-19558fc0907e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-9eb655.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a8c6e85c-9e5e-48d2-9572-6478db62d9fa","keyName":"e2e-sub-iso-dd279b","subscription":"e2e-shared-sub-995748","tenant":"e2e-shared-b-9eb655","userId":"a8c6e85c-9e5e-48d2-9572-6478db62d9fa","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T14:41:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d368e53b-e591-4626-a590-19558fc0907e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T14:41:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d368e53b-e591-4626-a590-19558fc0907e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:41:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d368e53b-e591-4626-a590-19558fc0907e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:41:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d368e53b-e591-4626-a590-19558fc0907e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-9eb655/sub-test-model-9eb655\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-9eb655/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:41:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d368e53b-e591-4626-a590-19558fc0907e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T14:41:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d368e53b-e591-4626-a590-19558fc0907e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-995748"} {"level":"debug","ts":"2026-07-17T14:41:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d368e53b-e591-4626-a590-19558fc0907e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T14:41:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d368e53b-e591-4626-a590-19558fc0907e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-17T14:41:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d368e53b-e591-4626-a590-19558fc0907e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T14:41:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d368e53b-e591-4626-a590-19558fc0907e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T14:41:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9af40badfdddecd71921886d8c967922fad1c02538c62648762bce9b056dd011"} {"level":"info","ts":"2026-07-17T14:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f539dd98c58a79d18b45bebac45bb607a6eff6d7a06c7e1c8cf431367091f227"} {"level":"info","ts":"2026-07-17T14:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/74b3bded818f06040ce20b1d79095391d2ed6347a6636f6a93da423fdbf8fdda"} {"level":"info","ts":"2026-07-17T14:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/40d1575c6c82b66e9c3026ed6a334ceb1940e554b21fb4bacb3c312691407b82"} {"level":"info","ts":"2026-07-17T14:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b564ebe9e9d87f40a0f3dac52e7e9e87250da6526fbc6ba3e71b71428938b9e5"} {"level":"info","ts":"2026-07-17T14:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8227989ee3624badb2c3c93a80e704489ff501900f7cb592436692c88fccb9c9"} {"level":"info","ts":"2026-07-17T14:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b9a9673d41f2de079fe25aeb77889a2054753385a477ec9d8c0e96179d8f04c5"} {"level":"info","ts":"2026-07-17T14:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2d4841ad90771291a475e61962e1ea525a372ec4185e1520890eb3a8f9e8d02f"} {"level":"info","ts":"2026-07-17T14:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/93085cb3914d86a0c150ed9dd35dc99d122efba53b3123d7daa107a89f0423c3"} {"level":"info","ts":"2026-07-17T14:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3"} {"level":"info","ts":"2026-07-17T14:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96"} {"level":"info","ts":"2026-07-17T14:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861"} {"level":"info","ts":"2026-07-17T14:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ecab2a53055ccc026cfe7238b2bc2570cdcf8ccfddad579e7edc1de8f2a2e030"} {"level":"info","ts":"2026-07-17T14:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126"} {"level":"info","ts":"2026-07-17T14:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/04f5509afa3bb7abc9322fecd3ccc3b1dae766172ea77e1789bde47971712391"} {"level":"info","ts":"2026-07-17T14:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f7a003b17c319dee0659bb144408066ba779b0ed09344eb4963c4cb3e9bdfe5a"} {"level":"info","ts":"2026-07-17T14:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/757b7f1578aeea5557e71e4b83b3d1eb1b31283d3945de1424f3a20002f6c02b"} {"level":"info","ts":"2026-07-17T14:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4e0c3374582166a62df8f7974c43a79f99677c516bc947e8b76a2db0cadec1d6"} {"level":"info","ts":"2026-07-17T14:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e15befba51f6baefae71b2c94d844213d10b047e6b9ceea2748c5fb1f78df234"} {"level":"info","ts":"2026-07-17T14:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/97da23d9d69e8861b9bfa35354f04c38c4ec02d0252ef054af0d94ceba4ffd9b"} {"level":"info","ts":"2026-07-17T14:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a49f1bbbcd2deda6b0ed0c52e5d7724ece155297740749e4c0dbbe05a5a18b75"} {"level":"info","ts":"2026-07-17T14:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0b025fd4844459bf98ee0ffee795e88d5a9b31a90e0af0ebb0e5b094afc807df"} {"level":"info","ts":"2026-07-17T14:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/741c45ef204a2eae8b9c876fb2b9b4d1255292d2c93c500b24421defdcf0239f"} {"level":"info","ts":"2026-07-17T14:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f95fa0f85dcfb07c42ce1c1c07f0de77f4b01f2acacdb16160afadd86f338126"} {"level":"debug","ts":"2026-07-17T14:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edb0230cdcacafe3d931342d0bd127cb7e49c6904c9bbdd8add68bbaabe0f84f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:43:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:43:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edb0230cdcacafe3d931342d0bd127cb7e49c6904c9bbdd8add68bbaabe0f84f"} {"level":"info","ts":"2026-07-17T14:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edb0230cdcacafe3d931342d0bd127cb7e49c6904c9bbdd8add68bbaabe0f84f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edb0230cdcacafe3d931342d0bd127cb7e49c6904c9bbdd8add68bbaabe0f84f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edb0230cdcacafe3d931342d0bd127cb7e49c6904c9bbdd8add68bbaabe0f84f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edb0230cdcacafe3d931342d0bd127cb7e49c6904c9bbdd8add68bbaabe0f84f"} {"level":"debug","ts":"2026-07-17T14:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edb0230cdcacafe3d931342d0bd127cb7e49c6904c9bbdd8add68bbaabe0f84f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:43:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:43:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["edb0230cdcacafe3d931342d0bd127cb7e49c6904c9bbdd8add68bbaabe0f84f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edb0230cdcacafe3d931342d0bd127cb7e49c6904c9bbdd8add68bbaabe0f84f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edb0230cdcacafe3d931342d0bd127cb7e49c6904c9bbdd8add68bbaabe0f84f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:43:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:43:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edb0230cdcacafe3d931342d0bd127cb7e49c6904c9bbdd8add68bbaabe0f84f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edb0230cdcacafe3d931342d0bd127cb7e49c6904c9bbdd8add68bbaabe0f84f"} {"level":"debug","ts":"2026-07-17T14:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edb0230cdcacafe3d931342d0bd127cb7e49c6904c9bbdd8add68bbaabe0f84f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:43:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:43:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["edb0230cdcacafe3d931342d0bd127cb7e49c6904c9bbdd8add68bbaabe0f84f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edb0230cdcacafe3d931342d0bd127cb7e49c6904c9bbdd8add68bbaabe0f84f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07b2c1a53c9c47042926fc7b0a9f08713a10a86351ec635e6a6579e3e3e60357","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:43:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:43:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edb0230cdcacafe3d931342d0bd127cb7e49c6904c9bbdd8add68bbaabe0f84f"} {"level":"info","ts":"2026-07-17T14:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07b2c1a53c9c47042926fc7b0a9f08713a10a86351ec635e6a6579e3e3e60357"} {"level":"info","ts":"2026-07-17T14:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07b2c1a53c9c47042926fc7b0a9f08713a10a86351ec635e6a6579e3e3e60357","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edb0230cdcacafe3d931342d0bd127cb7e49c6904c9bbdd8add68bbaabe0f84f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:43:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:43:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edb0230cdcacafe3d931342d0bd127cb7e49c6904c9bbdd8add68bbaabe0f84f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07b2c1a53c9c47042926fc7b0a9f08713a10a86351ec635e6a6579e3e3e60357","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:43:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:43:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07b2c1a53c9c47042926fc7b0a9f08713a10a86351ec635e6a6579e3e3e60357"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edb0230cdcacafe3d931342d0bd127cb7e49c6904c9bbdd8add68bbaabe0f84f"} {"level":"info","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07b2c1a53c9c47042926fc7b0a9f08713a10a86351ec635e6a6579e3e3e60357","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edb0230cdcacafe3d931342d0bd127cb7e49c6904c9bbdd8add68bbaabe0f84f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:43:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:43:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["edb0230cdcacafe3d931342d0bd127cb7e49c6904c9bbdd8add68bbaabe0f84f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07b2c1a53c9c47042926fc7b0a9f08713a10a86351ec635e6a6579e3e3e60357"} {"level":"info","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edb0230cdcacafe3d931342d0bd127cb7e49c6904c9bbdd8add68bbaabe0f84f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07b2c1a53c9c47042926fc7b0a9f08713a10a86351ec635e6a6579e3e3e60357","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edb0230cdcacafe3d931342d0bd127cb7e49c6904c9bbdd8add68bbaabe0f84f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:43:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:43:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edb0230cdcacafe3d931342d0bd127cb7e49c6904c9bbdd8add68bbaabe0f84f"} {"level":"info","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edb0230cdcacafe3d931342d0bd127cb7e49c6904c9bbdd8add68bbaabe0f84f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edb0230cdcacafe3d931342d0bd127cb7e49c6904c9bbdd8add68bbaabe0f84f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:43:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:43:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["edb0230cdcacafe3d931342d0bd127cb7e49c6904c9bbdd8add68bbaabe0f84f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07b2c1a53c9c47042926fc7b0a9f08713a10a86351ec635e6a6579e3e3e60357"} {"level":"info","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edb0230cdcacafe3d931342d0bd127cb7e49c6904c9bbdd8add68bbaabe0f84f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edb0230cdcacafe3d931342d0bd127cb7e49c6904c9bbdd8add68bbaabe0f84f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edb0230cdcacafe3d931342d0bd127cb7e49c6904c9bbdd8add68bbaabe0f84f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:43:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:43:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edb0230cdcacafe3d931342d0bd127cb7e49c6904c9bbdd8add68bbaabe0f84f"} {"level":"info","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edb0230cdcacafe3d931342d0bd127cb7e49c6904c9bbdd8add68bbaabe0f84f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edb0230cdcacafe3d931342d0bd127cb7e49c6904c9bbdd8add68bbaabe0f84f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:43:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:43:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"edb0230cdcacafe3d931342d0bd127cb7e49c6904c9bbdd8add68bbaabe0f84f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"edb0230cdcacafe3d931342d0bd127cb7e49c6904c9bbdd8add68bbaabe0f84f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edb0230cdcacafe3d931342d0bd127cb7e49c6904c9bbdd8add68bbaabe0f84f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edb0230cdcacafe3d931342d0bd127cb7e49c6904c9bbdd8add68bbaabe0f84f"} {"level":"debug","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edb0230cdcacafe3d931342d0bd127cb7e49c6904c9bbdd8add68bbaabe0f84f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edb0230cdcacafe3d931342d0bd127cb7e49c6904c9bbdd8add68bbaabe0f84f"} {"level":"debug","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edb0230cdcacafe3d931342d0bd127cb7e49c6904c9bbdd8add68bbaabe0f84f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:43:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:43:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["edb0230cdcacafe3d931342d0bd127cb7e49c6904c9bbdd8add68bbaabe0f84f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edb0230cdcacafe3d931342d0bd127cb7e49c6904c9bbdd8add68bbaabe0f84f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:43:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:43:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6"} {"level":"info","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edb0230cdcacafe3d931342d0bd127cb7e49c6904c9bbdd8add68bbaabe0f84f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:43:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:43:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edb0230cdcacafe3d931342d0bd127cb7e49c6904c9bbdd8add68bbaabe0f84f"} {"level":"info","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edb0230cdcacafe3d931342d0bd127cb7e49c6904c9bbdd8add68bbaabe0f84f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edb0230cdcacafe3d931342d0bd127cb7e49c6904c9bbdd8add68bbaabe0f84f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:43:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:43:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["edb0230cdcacafe3d931342d0bd127cb7e49c6904c9bbdd8add68bbaabe0f84f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6"} {"level":"info","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edb0230cdcacafe3d931342d0bd127cb7e49c6904c9bbdd8add68bbaabe0f84f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:43:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:43:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edb0230cdcacafe3d931342d0bd127cb7e49c6904c9bbdd8add68bbaabe0f84f"} {"level":"info","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edb0230cdcacafe3d931342d0bd127cb7e49c6904c9bbdd8add68bbaabe0f84f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:43:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:43:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edb0230cdcacafe3d931342d0bd127cb7e49c6904c9bbdd8add68bbaabe0f84f"} {"level":"info","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edb0230cdcacafe3d931342d0bd127cb7e49c6904c9bbdd8add68bbaabe0f84f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:43:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:43:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6"} {"level":"info","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edb0230cdcacafe3d931342d0bd127cb7e49c6904c9bbdd8add68bbaabe0f84f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:43:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:43:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edb0230cdcacafe3d931342d0bd127cb7e49c6904c9bbdd8add68bbaabe0f84f"} {"level":"info","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edb0230cdcacafe3d931342d0bd127cb7e49c6904c9bbdd8add68bbaabe0f84f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:43:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:43:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["edb0230cdcacafe3d931342d0bd127cb7e49c6904c9bbdd8add68bbaabe0f84f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6"} {"level":"info","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edb0230cdcacafe3d931342d0bd127cb7e49c6904c9bbdd8add68bbaabe0f84f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:43:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:43:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6"} {"level":"info","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edb0230cdcacafe3d931342d0bd127cb7e49c6904c9bbdd8add68bbaabe0f84f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:43:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:43:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edb0230cdcacafe3d931342d0bd127cb7e49c6904c9bbdd8add68bbaabe0f84f"} {"level":"info","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edb0230cdcacafe3d931342d0bd127cb7e49c6904c9bbdd8add68bbaabe0f84f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edb0230cdcacafe3d931342d0bd127cb7e49c6904c9bbdd8add68bbaabe0f84f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:43:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:43:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["edb0230cdcacafe3d931342d0bd127cb7e49c6904c9bbdd8add68bbaabe0f84f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6"} {"level":"info","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edb0230cdcacafe3d931342d0bd127cb7e49c6904c9bbdd8add68bbaabe0f84f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:43:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:43:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edb0230cdcacafe3d931342d0bd127cb7e49c6904c9bbdd8add68bbaabe0f84f"} {"level":"info","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edb0230cdcacafe3d931342d0bd127cb7e49c6904c9bbdd8add68bbaabe0f84f"} {"level":"info","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edb0230cdcacafe3d931342d0bd127cb7e49c6904c9bbdd8add68bbaabe0f84f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:43:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:43:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6"} {"level":"info","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6"} {"level":"debug","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:43:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:43:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:43:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:43:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6"} {"level":"info","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6"} {"level":"debug","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:43:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:43:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7703402a556afda2f76fba8bde2621401b34608e99b9229937d18618c0a9c9f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:43:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:43:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7703402a556afda2f76fba8bde2621401b34608e99b9229937d18618c0a9c9f3"} {"level":"info","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7703402a556afda2f76fba8bde2621401b34608e99b9229937d18618c0a9c9f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:43:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:43:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7703402a556afda2f76fba8bde2621401b34608e99b9229937d18618c0a9c9f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:43:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:43:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7703402a556afda2f76fba8bde2621401b34608e99b9229937d18618c0a9c9f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6"} {"level":"info","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7703402a556afda2f76fba8bde2621401b34608e99b9229937d18618c0a9c9f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:43:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:43:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7703402a556afda2f76fba8bde2621401b34608e99b9229937d18618c0a9c9f3"} {"level":"info","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7703402a556afda2f76fba8bde2621401b34608e99b9229937d18618c0a9c9f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:43:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:43:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6"} {"level":"info","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:43:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:43:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7703402a556afda2f76fba8bde2621401b34608e99b9229937d18618c0a9c9f3"} {"level":"info","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:43:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:43:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6"} {"level":"info","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6"} {"level":"debug","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"738ab529ddd28eabc85a6d91f69e2389b88a7dcdd05891f27751706cd378889f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:43:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:43:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6"} {"level":"info","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"738ab529ddd28eabc85a6d91f69e2389b88a7dcdd05891f27751706cd378889f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:43:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:43:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/738ab529ddd28eabc85a6d91f69e2389b88a7dcdd05891f27751706cd378889f"} {"level":"info","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80824e2a5efa824dbf5b00aa2b9ec6c48ff59f27656fb6f19a4990f10e86202e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:43:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:43:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80824e2a5efa824dbf5b00aa2b9ec6c48ff59f27656fb6f19a4990f10e86202e"} {"level":"info","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80824e2a5efa824dbf5b00aa2b9ec6c48ff59f27656fb6f19a4990f10e86202e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"738ab529ddd28eabc85a6d91f69e2389b88a7dcdd05891f27751706cd378889f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:43:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:43:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/738ab529ddd28eabc85a6d91f69e2389b88a7dcdd05891f27751706cd378889f"} {"level":"info","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"738ab529ddd28eabc85a6d91f69e2389b88a7dcdd05891f27751706cd378889f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:43:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:43:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6"} {"level":"info","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80824e2a5efa824dbf5b00aa2b9ec6c48ff59f27656fb6f19a4990f10e86202e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9730b9292598ff4deee3bca6c37a6bac07de7f10d7b8f59651e68b5a56de3cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:43:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:43:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80824e2a5efa824dbf5b00aa2b9ec6c48ff59f27656fb6f19a4990f10e86202e"} {"level":"info","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9730b9292598ff4deee3bca6c37a6bac07de7f10d7b8f59651e68b5a56de3cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"738ab529ddd28eabc85a6d91f69e2389b88a7dcdd05891f27751706cd378889f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:43:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:43:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["738ab529ddd28eabc85a6d91f69e2389b88a7dcdd05891f27751706cd378889f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9730b9292598ff4deee3bca6c37a6bac07de7f10d7b8f59651e68b5a56de3cc"} {"level":"info","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"738ab529ddd28eabc85a6d91f69e2389b88a7dcdd05891f27751706cd378889f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:43:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:43:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/738ab529ddd28eabc85a6d91f69e2389b88a7dcdd05891f27751706cd378889f"} {"level":"info","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6"} {"level":"info","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80824e2a5efa824dbf5b00aa2b9ec6c48ff59f27656fb6f19a4990f10e86202e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:43:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:43:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80824e2a5efa824dbf5b00aa2b9ec6c48ff59f27656fb6f19a4990f10e86202e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9730b9292598ff4deee3bca6c37a6bac07de7f10d7b8f59651e68b5a56de3cc"} {"level":"info","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80824e2a5efa824dbf5b00aa2b9ec6c48ff59f27656fb6f19a4990f10e86202e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9730b9292598ff4deee3bca6c37a6bac07de7f10d7b8f59651e68b5a56de3cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:43:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:43:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9730b9292598ff4deee3bca6c37a6bac07de7f10d7b8f59651e68b5a56de3cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c05272fafcec8b032fc04cdee61ff716e84611aef6f955968d803f7841edec6"} {"level":"info","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9730b9292598ff4deee3bca6c37a6bac07de7f10d7b8f59651e68b5a56de3cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c05272fafcec8b032fc04cdee61ff716e84611aef6f955968d803f7841edec6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:43:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:43:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c05272fafcec8b032fc04cdee61ff716e84611aef6f955968d803f7841edec6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/738ab529ddd28eabc85a6d91f69e2389b88a7dcdd05891f27751706cd378889f"} {"level":"info","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c05272fafcec8b032fc04cdee61ff716e84611aef6f955968d803f7841edec6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"738ab529ddd28eabc85a6d91f69e2389b88a7dcdd05891f27751706cd378889f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14f613dc696036dd331ccc040914fc4446c2f266c7a293f944276b9768d2bc32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:43:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:43:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14f613dc696036dd331ccc040914fc4446c2f266c7a293f944276b9768d2bc32"} {"level":"info","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14f613dc696036dd331ccc040914fc4446c2f266c7a293f944276b9768d2bc32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:43:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:43:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6"} {"level":"info","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80824e2a5efa824dbf5b00aa2b9ec6c48ff59f27656fb6f19a4990f10e86202e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:43:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:43:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80824e2a5efa824dbf5b00aa2b9ec6c48ff59f27656fb6f19a4990f10e86202e"} {"level":"info","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80824e2a5efa824dbf5b00aa2b9ec6c48ff59f27656fb6f19a4990f10e86202e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9730b9292598ff4deee3bca6c37a6bac07de7f10d7b8f59651e68b5a56de3cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:43:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:43:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9730b9292598ff4deee3bca6c37a6bac07de7f10d7b8f59651e68b5a56de3cc"} {"level":"info","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9730b9292598ff4deee3bca6c37a6bac07de7f10d7b8f59651e68b5a56de3cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c05272fafcec8b032fc04cdee61ff716e84611aef6f955968d803f7841edec6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:43:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:43:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c05272fafcec8b032fc04cdee61ff716e84611aef6f955968d803f7841edec6"} {"level":"info","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c05272fafcec8b032fc04cdee61ff716e84611aef6f955968d803f7841edec6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37355cb6365806d26f7ef64def480b86fa6753790189345f0d6deb76db9856a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:43:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:43:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37355cb6365806d26f7ef64def480b86fa6753790189345f0d6deb76db9856a5"} {"level":"info","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37355cb6365806d26f7ef64def480b86fa6753790189345f0d6deb76db9856a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14f613dc696036dd331ccc040914fc4446c2f266c7a293f944276b9768d2bc32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b564ebe9e9d87f40a0f3dac52e7e9e87250da6526fbc6ba3e71b71428938b9e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:43:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:43:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14f613dc696036dd331ccc040914fc4446c2f266c7a293f944276b9768d2bc32"} {"level":"info","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b564ebe9e9d87f40a0f3dac52e7e9e87250da6526fbc6ba3e71b71428938b9e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:43:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:43:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b564ebe9e9d87f40a0f3dac52e7e9e87250da6526fbc6ba3e71b71428938b9e5"} {"level":"info","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6"} {"level":"info","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80824e2a5efa824dbf5b00aa2b9ec6c48ff59f27656fb6f19a4990f10e86202e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9730b9292598ff4deee3bca6c37a6bac07de7f10d7b8f59651e68b5a56de3cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:43:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:43:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9730b9292598ff4deee3bca6c37a6bac07de7f10d7b8f59651e68b5a56de3cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80824e2a5efa824dbf5b00aa2b9ec6c48ff59f27656fb6f19a4990f10e86202e"} {"level":"info","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9730b9292598ff4deee3bca6c37a6bac07de7f10d7b8f59651e68b5a56de3cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"243736032ee0d91263cc16fd44e5a2cd8457605fd6f2f7fb29a1dd889448169b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:43:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:43:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9730b9292598ff4deee3bca6c37a6bac07de7f10d7b8f59651e68b5a56de3cc"} {"level":"info","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/243736032ee0d91263cc16fd44e5a2cd8457605fd6f2f7fb29a1dd889448169b"} {"level":"info","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"243736032ee0d91263cc16fd44e5a2cd8457605fd6f2f7fb29a1dd889448169b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:43:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:43:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861"} {"level":"info","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c05272fafcec8b032fc04cdee61ff716e84611aef6f955968d803f7841edec6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04f5509afa3bb7abc9322fecd3ccc3b1dae766172ea77e1789bde47971712391","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:43:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:43:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c05272fafcec8b032fc04cdee61ff716e84611aef6f955968d803f7841edec6"} {"level":"info","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04f5509afa3bb7abc9322fecd3ccc3b1dae766172ea77e1789bde47971712391","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37355cb6365806d26f7ef64def480b86fa6753790189345f0d6deb76db9856a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:43:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:43:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37355cb6365806d26f7ef64def480b86fa6753790189345f0d6deb76db9856a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04f5509afa3bb7abc9322fecd3ccc3b1dae766172ea77e1789bde47971712391"} {"level":"info","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37355cb6365806d26f7ef64def480b86fa6753790189345f0d6deb76db9856a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14f613dc696036dd331ccc040914fc4446c2f266c7a293f944276b9768d2bc32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:43:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:43:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14f613dc696036dd331ccc040914fc4446c2f266c7a293f944276b9768d2bc32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37355cb6365806d26f7ef64def480b86fa6753790189345f0d6deb76db9856a5"} {"level":"info","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14f613dc696036dd331ccc040914fc4446c2f266c7a293f944276b9768d2bc32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b564ebe9e9d87f40a0f3dac52e7e9e87250da6526fbc6ba3e71b71428938b9e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:43:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:43:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b564ebe9e9d87f40a0f3dac52e7e9e87250da6526fbc6ba3e71b71428938b9e5"} {"level":"info","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b564ebe9e9d87f40a0f3dac52e7e9e87250da6526fbc6ba3e71b71428938b9e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:43:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:43:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6"} {"level":"info","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c19962786ac743137b6461d8e2aacb99d301e3904d81f28696b6c2acd4bb2a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:43:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:43:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c19962786ac743137b6461d8e2aacb99d301e3904d81f28696b6c2acd4bb2a4"} {"level":"info","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9730b9292598ff4deee3bca6c37a6bac07de7f10d7b8f59651e68b5a56de3cc"} {"level":"info","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c19962786ac743137b6461d8e2aacb99d301e3904d81f28696b6c2acd4bb2a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80824e2a5efa824dbf5b00aa2b9ec6c48ff59f27656fb6f19a4990f10e86202e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:43:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:43:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80824e2a5efa824dbf5b00aa2b9ec6c48ff59f27656fb6f19a4990f10e86202e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9a9673d41f2de079fe25aeb77889a2054753385a477ec9d8c0e96179d8f04c5"} {"level":"info","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/243736032ee0d91263cc16fd44e5a2cd8457605fd6f2f7fb29a1dd889448169b"} {"level":"info","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f2ebc6af15123ac7549493e1ce3127148d5ed04f0212313165af22862b5bdc7"} {"level":"info","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80824e2a5efa824dbf5b00aa2b9ec6c48ff59f27656fb6f19a4990f10e86202e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9730b9292598ff4deee3bca6c37a6bac07de7f10d7b8f59651e68b5a56de3cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9a9673d41f2de079fe25aeb77889a2054753385a477ec9d8c0e96179d8f04c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:43:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:43:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9a9673d41f2de079fe25aeb77889a2054753385a477ec9d8c0e96179d8f04c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861"} {"level":"info","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3"} {"level":"info","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9a9673d41f2de079fe25aeb77889a2054753385a477ec9d8c0e96179d8f04c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"243736032ee0d91263cc16fd44e5a2cd8457605fd6f2f7fb29a1dd889448169b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:43:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:43:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["243736032ee0d91263cc16fd44e5a2cd8457605fd6f2f7fb29a1dd889448169b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04f5509afa3bb7abc9322fecd3ccc3b1dae766172ea77e1789bde47971712391"} {"level":"info","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"243736032ee0d91263cc16fd44e5a2cd8457605fd6f2f7fb29a1dd889448169b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f2ebc6af15123ac7549493e1ce3127148d5ed04f0212313165af22862b5bdc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:43:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:43:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f2ebc6af15123ac7549493e1ce3127148d5ed04f0212313165af22862b5bdc7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/242816cbdc7e3892a60ed840dbb1b7c34a627149b9a4a51b633cbdc94a0106b6"} {"level":"info","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f2ebc6af15123ac7549493e1ce3127148d5ed04f0212313165af22862b5bdc7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:43:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:43:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37355cb6365806d26f7ef64def480b86fa6753790189345f0d6deb76db9856a5"} {"level":"info","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9af40badfdddecd71921886d8c967922fad1c02538c62648762bce9b056dd011"} {"level":"info","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14f613dc696036dd331ccc040914fc4446c2f266c7a293f944276b9768d2bc32"} {"level":"debug","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:43:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:43:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96"} {"level":"info","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b564ebe9e9d87f40a0f3dac52e7e9e87250da6526fbc6ba3e71b71428938b9e5"} {"level":"info","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c05272fafcec8b032fc04cdee61ff716e84611aef6f955968d803f7841edec6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:43:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:43:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c05272fafcec8b032fc04cdee61ff716e84611aef6f955968d803f7841edec6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6"} {"level":"info","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ef9d0bbf3a3694d180c2cd57488d7e424f6d657b3499be07013facfeca870b3"} {"level":"info","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30733d77045bfdf6758cac0c7064bb74ed878b7a90a7000b58dd213804051451"} {"level":"info","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c05272fafcec8b032fc04cdee61ff716e84611aef6f955968d803f7841edec6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04f5509afa3bb7abc9322fecd3ccc3b1dae766172ea77e1789bde47971712391","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:43:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:43:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04f5509afa3bb7abc9322fecd3ccc3b1dae766172ea77e1789bde47971712391"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c19962786ac743137b6461d8e2aacb99d301e3904d81f28696b6c2acd4bb2a4"} {"level":"info","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126"} {"level":"info","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04f5509afa3bb7abc9322fecd3ccc3b1dae766172ea77e1789bde47971712391","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"242816cbdc7e3892a60ed840dbb1b7c34a627149b9a4a51b633cbdc94a0106b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:43:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:43:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["242816cbdc7e3892a60ed840dbb1b7c34a627149b9a4a51b633cbdc94a0106b6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80824e2a5efa824dbf5b00aa2b9ec6c48ff59f27656fb6f19a4990f10e86202e"} {"level":"info","ts":"2026-07-17T14:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9a9673d41f2de079fe25aeb77889a2054753385a477ec9d8c0e96179d8f04c5"} {"level":"info","ts":"2026-07-17T14:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"242816cbdc7e3892a60ed840dbb1b7c34a627149b9a4a51b633cbdc94a0106b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37355cb6365806d26f7ef64def480b86fa6753790189345f0d6deb76db9856a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9af40badfdddecd71921886d8c967922fad1c02538c62648762bce9b056dd011","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:43:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:43:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9af40badfdddecd71921886d8c967922fad1c02538c62648762bce9b056dd011"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/243736032ee0d91263cc16fd44e5a2cd8457605fd6f2f7fb29a1dd889448169b"} {"level":"info","ts":"2026-07-17T14:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f2ebc6af15123ac7549493e1ce3127148d5ed04f0212313165af22862b5bdc7"} {"level":"info","ts":"2026-07-17T14:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861"} {"level":"info","ts":"2026-07-17T14:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9af40badfdddecd71921886d8c967922fad1c02538c62648762bce9b056dd011","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14f613dc696036dd331ccc040914fc4446c2f266c7a293f944276b9768d2bc32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:43:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:43:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3"} {"level":"info","ts":"2026-07-17T14:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c05272fafcec8b032fc04cdee61ff716e84611aef6f955968d803f7841edec6"} {"level":"info","ts":"2026-07-17T14:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b564ebe9e9d87f40a0f3dac52e7e9e87250da6526fbc6ba3e71b71428938b9e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:43:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:43:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b564ebe9e9d87f40a0f3dac52e7e9e87250da6526fbc6ba3e71b71428938b9e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04f5509afa3bb7abc9322fecd3ccc3b1dae766172ea77e1789bde47971712391"} {"level":"info","ts":"2026-07-17T14:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/242816cbdc7e3892a60ed840dbb1b7c34a627149b9a4a51b633cbdc94a0106b6"} {"level":"info","ts":"2026-07-17T14:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9af40badfdddecd71921886d8c967922fad1c02538c62648762bce9b056dd011"} {"level":"info","ts":"2026-07-17T14:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b564ebe9e9d87f40a0f3dac52e7e9e87250da6526fbc6ba3e71b71428938b9e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:43:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:43:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96"} {"level":"info","ts":"2026-07-17T14:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b564ebe9e9d87f40a0f3dac52e7e9e87250da6526fbc6ba3e71b71428938b9e5"} {"level":"info","ts":"2026-07-17T14:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ef9d0bbf3a3694d180c2cd57488d7e424f6d657b3499be07013facfeca870b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:43:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:43:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ef9d0bbf3a3694d180c2cd57488d7e424f6d657b3499be07013facfeca870b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6"} {"level":"info","ts":"2026-07-17T14:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ef9d0bbf3a3694d180c2cd57488d7e424f6d657b3499be07013facfeca870b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30733d77045bfdf6758cac0c7064bb74ed878b7a90a7000b58dd213804051451","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:43:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:43:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30733d77045bfdf6758cac0c7064bb74ed878b7a90a7000b58dd213804051451"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ef9d0bbf3a3694d180c2cd57488d7e424f6d657b3499be07013facfeca870b3"} {"level":"info","ts":"2026-07-17T14:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30733d77045bfdf6758cac0c7064bb74ed878b7a90a7000b58dd213804051451","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:43:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:43:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30733d77045bfdf6758cac0c7064bb74ed878b7a90a7000b58dd213804051451"} {"level":"info","ts":"2026-07-17T14:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c19962786ac743137b6461d8e2aacb99d301e3904d81f28696b6c2acd4bb2a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:43:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:43:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c19962786ac743137b6461d8e2aacb99d301e3904d81f28696b6c2acd4bb2a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126"} {"level":"info","ts":"2026-07-17T14:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c19962786ac743137b6461d8e2aacb99d301e3904d81f28696b6c2acd4bb2a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80824e2a5efa824dbf5b00aa2b9ec6c48ff59f27656fb6f19a4990f10e86202e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9a9673d41f2de079fe25aeb77889a2054753385a477ec9d8c0e96179d8f04c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"243736032ee0d91263cc16fd44e5a2cd8457605fd6f2f7fb29a1dd889448169b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f2ebc6af15123ac7549493e1ce3127148d5ed04f0212313165af22862b5bdc7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c05272fafcec8b032fc04cdee61ff716e84611aef6f955968d803f7841edec6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04f5509afa3bb7abc9322fecd3ccc3b1dae766172ea77e1789bde47971712391","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"242816cbdc7e3892a60ed840dbb1b7c34a627149b9a4a51b633cbdc94a0106b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9af40badfdddecd71921886d8c967922fad1c02538c62648762bce9b056dd011","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b564ebe9e9d87f40a0f3dac52e7e9e87250da6526fbc6ba3e71b71428938b9e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ef9d0bbf3a3694d180c2cd57488d7e424f6d657b3499be07013facfeca870b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30733d77045bfdf6758cac0c7064bb74ed878b7a90a7000b58dd213804051451","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c19962786ac743137b6461d8e2aacb99d301e3904d81f28696b6c2acd4bb2a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-17T14:43:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-17T14:43:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c19962786ac743137b6461d8e2aacb99d301e3904d81f28696b6c2acd4bb2a4"} {"level":"info","ts":"2026-07-17T14:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c19962786ac743137b6461d8e2aacb99d301e3904d81f28696b6c2acd4bb2a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c19962786ac743137b6461d8e2aacb99d301e3904d81f28696b6c2acd4bb2a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c19962786ac743137b6461d8e2aacb99d301e3904d81f28696b6c2acd4bb2a4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c19962786ac743137b6461d8e2aacb99d301e3904d81f28696b6c2acd4bb2a4"} {"level":"debug","ts":"2026-07-17T14:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c19962786ac743137b6461d8e2aacb99d301e3904d81f28696b6c2acd4bb2a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-17T14:43:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-17T14:43:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c19962786ac743137b6461d8e2aacb99d301e3904d81f28696b6c2acd4bb2a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-17T14:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c19962786ac743137b6461d8e2aacb99d301e3904d81f28696b6c2acd4bb2a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-17T14:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c19962786ac743137b6461d8e2aacb99d301e3904d81f28696b6c2acd4bb2a4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-17T14:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c19962786ac743137b6461d8e2aacb99d301e3904d81f28696b6c2acd4bb2a4"} {"level":"info","ts":"2026-07-17T14:43:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b5ef26ee-7b81-452b-b2a2-03b072afafb0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:56984","PortSpecifier":{"PortValue":56984}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.101:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b5ef26ee-7b81-452b-b2a2-03b072afafb0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-244a73.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T14:43:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b5ef26ee-7b81-452b-b2a2-03b072afafb0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:56984","PortSpecifier":{"PortValue":56984}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.101:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784299404,"nanos":440616443},"http":{"id":"b5ef26ee-7b81-452b-b2a2-03b072afafb0","method":"POST","headers":{":authority":"e2e-shared-a-244a73.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T14:43:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b5ef26ee-7b81-452b-b2a2-03b072afafb0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T14:43:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b5ef26ee-7b81-452b-b2a2-03b072afafb0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"de491402-0b93-4648-a022-505c097cd610","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e645c696-460f-41b3-b391-2e55602b163a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c3765a88c95"]}} {"level":"debug","ts":"2026-07-17T14:43:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b5ef26ee-7b81-452b-b2a2-03b072afafb0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c3765a88c95"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e645c696-460f-41b3-b391-2e55602b163a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de491402-0b93-4648-a022-505c097cd610","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b9a9673d41f2de079fe25aeb77889a2054753385a477ec9d8c0e96179d8f04c5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.101:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-244a73.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T14:43:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5ef26ee-7b81-452b-b2a2-03b072afafb0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:43:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5ef26ee-7b81-452b-b2a2-03b072afafb0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:43:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5ef26ee-7b81-452b-b2a2-03b072afafb0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-244a73/rate-test-model-244a73\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-244a73/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:43:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b5ef26ee-7b81-452b-b2a2-03b072afafb0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T14:43:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5ef26ee-7b81-452b-b2a2-03b072afafb0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T14:43:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5ef26ee-7b81-452b-b2a2-03b072afafb0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T14:43:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b5ef26ee-7b81-452b-b2a2-03b072afafb0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T14:43:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b5ef26ee-7b81-452b-b2a2-03b072afafb0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T14:43:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"65608250-5604-46b0-9af1-32db8ec8c8f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:36792","PortSpecifier":{"PortValue":36792}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.102:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"65608250-5604-46b0-9af1-32db8ec8c8f2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-9eb655.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T14:43:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"65608250-5604-46b0-9af1-32db8ec8c8f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:36792","PortSpecifier":{"PortValue":36792}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.102:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784299404,"nanos":491290959},"http":{"id":"65608250-5604-46b0-9af1-32db8ec8c8f2","method":"POST","headers":{":authority":"e2e-shared-b-9eb655.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T14:43:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"65608250-5604-46b0-9af1-32db8ec8c8f2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T14:43:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"65608250-5604-46b0-9af1-32db8ec8c8f2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"de491402-0b93-4648-a022-505c097cd610","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e645c696-460f-41b3-b391-2e55602b163a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c3765a88c95"]}} {"level":"debug","ts":"2026-07-17T14:43:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"65608250-5604-46b0-9af1-32db8ec8c8f2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c3765a88c95"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e645c696-460f-41b3-b391-2e55602b163a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de491402-0b93-4648-a022-505c097cd610","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.102:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-9eb655.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T14:43:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65608250-5604-46b0-9af1-32db8ec8c8f2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:43:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65608250-5604-46b0-9af1-32db8ec8c8f2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:43:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65608250-5604-46b0-9af1-32db8ec8c8f2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-9eb655/rate-test-model-9eb655\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-9eb655/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:43:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"65608250-5604-46b0-9af1-32db8ec8c8f2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T14:43:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65608250-5604-46b0-9af1-32db8ec8c8f2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T14:43:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65608250-5604-46b0-9af1-32db8ec8c8f2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T14:43:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"65608250-5604-46b0-9af1-32db8ec8c8f2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T14:43:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"65608250-5604-46b0-9af1-32db8ec8c8f2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T14:43:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"780e3ffe-aabf-4ab2-a1b1-dba2b5d337cc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:56988","PortSpecifier":{"PortValue":56988}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.101:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"780e3ffe-aabf-4ab2-a1b1-dba2b5d337cc","method":"POST","path":"/ai-tenant-e2e-shared-a-244a73/rate-test-model-244a73/v1/completions","host":"e2e-shared-a-244a73.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T14:43:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"780e3ffe-aabf-4ab2-a1b1-dba2b5d337cc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:56988","PortSpecifier":{"PortValue":56988}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.101:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784299404,"nanos":533085288},"http":{"id":"780e3ffe-aabf-4ab2-a1b1-dba2b5d337cc","method":"POST","headers":{":authority":"e2e-shared-a-244a73.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-244a73/rate-test-model-244a73/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T14:43:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"780e3ffe-aabf-4ab2-a1b1-dba2b5d337cc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-khTvkGlVZuB5jf1T_CEe1eefaRcVmLCFCWo24VpLMfjPMGdHAD0WGEfUa9Fa"} {"level":"debug","ts":"2026-07-17T14:43:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"780e3ffe-aabf-4ab2-a1b1-dba2b5d337cc","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-244a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-khTvkGlVZuB5jf1T_CEe1eefaRcVmLCFCWo24VpLMfjPMGdHAD0WGEfUa9Fa\"}"} {"level":"debug","ts":"2026-07-17T14:43:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"780e3ffe-aabf-4ab2-a1b1-dba2b5d337cc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-244a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4a7bfb7a-cc41-40e9-984e-0eb1810cd46f","keyName":"e2e-rate-a-d4fb21","subscription":"e2e-rate-iso-a-d4fb21","tenant":"e2e-shared-a-244a73","userId":"4a7bfb7a-cc41-40e9-984e-0eb1810cd46f","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T14:43:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"780e3ffe-aabf-4ab2-a1b1-dba2b5d337cc","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-244a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-244a73/rate-test-model-244a73\",\"requestedSubscription\":\"e2e-rate-iso-a-d4fb21\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-17T14:43:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"780e3ffe-aabf-4ab2-a1b1-dba2b5d337cc","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-244a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-244a73","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d4fb21","namespace":"ai-tenant-e2e-shared-a-244a73","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-17T14:43:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"780e3ffe-aabf-4ab2-a1b1-dba2b5d337cc","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T14:43:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"780e3ffe-aabf-4ab2-a1b1-dba2b5d337cc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:43:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"780e3ffe-aabf-4ab2-a1b1-dba2b5d337cc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:43:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"780e3ffe-aabf-4ab2-a1b1-dba2b5d337cc","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:43:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"780e3ffe-aabf-4ab2-a1b1-dba2b5d337cc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-244a73/rate-test-model-244a73\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-244a73/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:43:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"780e3ffe-aabf-4ab2-a1b1-dba2b5d337cc","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d4fb21"} {"level":"debug","ts":"2026-07-17T14:43:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"780e3ffe-aabf-4ab2-a1b1-dba2b5d337cc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T14:43:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"780e3ffe-aabf-4ab2-a1b1-dba2b5d337cc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T14:43:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"780e3ffe-aabf-4ab2-a1b1-dba2b5d337cc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4a7bfb7a-cc41-40e9-984e-0eb1810cd46f","keyName":"e2e-rate-a-d4fb21","selected_subscription":"e2e-rate-iso-a-d4fb21","selected_subscription_key":"ai-tenant-e2e-shared-a-244a73/e2e-rate-iso-a-d4fb21@ai-tenant-e2e-shared-a-244a73/rate-test-model-244a73","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-244a73","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d4fb21","namespace":"ai-tenant-e2e-shared-a-244a73","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-17T14:43:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"780e3ffe-aabf-4ab2-a1b1-dba2b5d337cc","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T14:43:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"780e3ffe-aabf-4ab2-a1b1-dba2b5d337cc","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T14:43:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e6f7f2b4-661a-4958-8c63-2c0987d83c8c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:57002","PortSpecifier":{"PortValue":57002}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.101:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e6f7f2b4-661a-4958-8c63-2c0987d83c8c","method":"POST","path":"/ai-tenant-e2e-shared-a-244a73/rate-test-model-244a73/v1/completions","host":"e2e-shared-a-244a73.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T14:43:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e6f7f2b4-661a-4958-8c63-2c0987d83c8c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:57002","PortSpecifier":{"PortValue":57002}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.101:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784299405,"nanos":603570148},"http":{"id":"e6f7f2b4-661a-4958-8c63-2c0987d83c8c","method":"POST","headers":{":authority":"e2e-shared-a-244a73.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-244a73/rate-test-model-244a73/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T14:43:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e6f7f2b4-661a-4958-8c63-2c0987d83c8c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-khTvkGlVZuB5jf1T_CEe1eefaRcVmLCFCWo24VpLMfjPMGdHAD0WGEfUa9Fa"} {"level":"debug","ts":"2026-07-17T14:43:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e6f7f2b4-661a-4958-8c63-2c0987d83c8c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-244a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-khTvkGlVZuB5jf1T_CEe1eefaRcVmLCFCWo24VpLMfjPMGdHAD0WGEfUa9Fa\"}"} {"level":"debug","ts":"2026-07-17T14:43:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e6f7f2b4-661a-4958-8c63-2c0987d83c8c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-244a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4a7bfb7a-cc41-40e9-984e-0eb1810cd46f","keyName":"e2e-rate-a-d4fb21","subscription":"e2e-rate-iso-a-d4fb21","tenant":"e2e-shared-a-244a73","userId":"4a7bfb7a-cc41-40e9-984e-0eb1810cd46f","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T14:43:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e6f7f2b4-661a-4958-8c63-2c0987d83c8c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-244a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-244a73/rate-test-model-244a73\",\"requestedSubscription\":\"e2e-rate-iso-a-d4fb21\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-17T14:43:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e6f7f2b4-661a-4958-8c63-2c0987d83c8c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-244a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-244a73","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d4fb21","namespace":"ai-tenant-e2e-shared-a-244a73","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-17T14:43:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e6f7f2b4-661a-4958-8c63-2c0987d83c8c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T14:43:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6f7f2b4-661a-4958-8c63-2c0987d83c8c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:43:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6f7f2b4-661a-4958-8c63-2c0987d83c8c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-244a73/rate-test-model-244a73\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-244a73/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:43:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6f7f2b4-661a-4958-8c63-2c0987d83c8c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:43:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6f7f2b4-661a-4958-8c63-2c0987d83c8c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:43:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6f7f2b4-661a-4958-8c63-2c0987d83c8c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d4fb21"} {"level":"debug","ts":"2026-07-17T14:43:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6f7f2b4-661a-4958-8c63-2c0987d83c8c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T14:43:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6f7f2b4-661a-4958-8c63-2c0987d83c8c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T14:43:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6f7f2b4-661a-4958-8c63-2c0987d83c8c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4a7bfb7a-cc41-40e9-984e-0eb1810cd46f","keyName":"e2e-rate-a-d4fb21","selected_subscription":"e2e-rate-iso-a-d4fb21","selected_subscription_key":"ai-tenant-e2e-shared-a-244a73/e2e-rate-iso-a-d4fb21@ai-tenant-e2e-shared-a-244a73/rate-test-model-244a73","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-244a73","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d4fb21","namespace":"ai-tenant-e2e-shared-a-244a73","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-17T14:43:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e6f7f2b4-661a-4958-8c63-2c0987d83c8c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T14:43:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e6f7f2b4-661a-4958-8c63-2c0987d83c8c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T14:43:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"02dc57e2-e0f3-4825-9496-e2555cdc5ddb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:57010","PortSpecifier":{"PortValue":57010}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.101:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"02dc57e2-e0f3-4825-9496-e2555cdc5ddb","method":"POST","path":"/ai-tenant-e2e-shared-a-244a73/rate-test-model-244a73/v1/completions","host":"e2e-shared-a-244a73.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T14:43:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"02dc57e2-e0f3-4825-9496-e2555cdc5ddb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:57010","PortSpecifier":{"PortValue":57010}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.101:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784299406,"nanos":646488682},"http":{"id":"02dc57e2-e0f3-4825-9496-e2555cdc5ddb","method":"POST","headers":{":authority":"e2e-shared-a-244a73.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-244a73/rate-test-model-244a73/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T14:43:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"02dc57e2-e0f3-4825-9496-e2555cdc5ddb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-khTvkGlVZuB5jf1T_CEe1eefaRcVmLCFCWo24VpLMfjPMGdHAD0WGEfUa9Fa"} {"level":"debug","ts":"2026-07-17T14:43:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"02dc57e2-e0f3-4825-9496-e2555cdc5ddb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-244a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-khTvkGlVZuB5jf1T_CEe1eefaRcVmLCFCWo24VpLMfjPMGdHAD0WGEfUa9Fa\"}"} {"level":"debug","ts":"2026-07-17T14:43:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"02dc57e2-e0f3-4825-9496-e2555cdc5ddb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-244a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4a7bfb7a-cc41-40e9-984e-0eb1810cd46f","keyName":"e2e-rate-a-d4fb21","subscription":"e2e-rate-iso-a-d4fb21","tenant":"e2e-shared-a-244a73","userId":"4a7bfb7a-cc41-40e9-984e-0eb1810cd46f","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T14:43:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"02dc57e2-e0f3-4825-9496-e2555cdc5ddb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-244a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-244a73/rate-test-model-244a73\",\"requestedSubscription\":\"e2e-rate-iso-a-d4fb21\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-17T14:43:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"02dc57e2-e0f3-4825-9496-e2555cdc5ddb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-244a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-244a73","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d4fb21","namespace":"ai-tenant-e2e-shared-a-244a73","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-17T14:43:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"02dc57e2-e0f3-4825-9496-e2555cdc5ddb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T14:43:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02dc57e2-e0f3-4825-9496-e2555cdc5ddb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:43:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02dc57e2-e0f3-4825-9496-e2555cdc5ddb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:43:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02dc57e2-e0f3-4825-9496-e2555cdc5ddb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-244a73/rate-test-model-244a73\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-244a73/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:43:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02dc57e2-e0f3-4825-9496-e2555cdc5ddb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:43:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"02dc57e2-e0f3-4825-9496-e2555cdc5ddb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T14:43:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"02dc57e2-e0f3-4825-9496-e2555cdc5ddb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T14:43:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"02dc57e2-e0f3-4825-9496-e2555cdc5ddb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d4fb21"} {"level":"debug","ts":"2026-07-17T14:43:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"02dc57e2-e0f3-4825-9496-e2555cdc5ddb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4a7bfb7a-cc41-40e9-984e-0eb1810cd46f","keyName":"e2e-rate-a-d4fb21","selected_subscription":"e2e-rate-iso-a-d4fb21","selected_subscription_key":"ai-tenant-e2e-shared-a-244a73/e2e-rate-iso-a-d4fb21@ai-tenant-e2e-shared-a-244a73/rate-test-model-244a73","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-244a73","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d4fb21","namespace":"ai-tenant-e2e-shared-a-244a73","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-17T14:43:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"02dc57e2-e0f3-4825-9496-e2555cdc5ddb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T14:43:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"02dc57e2-e0f3-4825-9496-e2555cdc5ddb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T14:43:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a12f3084-da1a-4065-a77c-f6590cb0cdf5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:57024","PortSpecifier":{"PortValue":57024}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.101:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a12f3084-da1a-4065-a77c-f6590cb0cdf5","method":"POST","path":"/ai-tenant-e2e-shared-a-244a73/rate-test-model-244a73/v1/completions","host":"e2e-shared-a-244a73.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T14:43:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a12f3084-da1a-4065-a77c-f6590cb0cdf5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:57024","PortSpecifier":{"PortValue":57024}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.101:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784299407,"nanos":684684673},"http":{"id":"a12f3084-da1a-4065-a77c-f6590cb0cdf5","method":"POST","headers":{":authority":"e2e-shared-a-244a73.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-244a73/rate-test-model-244a73/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T14:43:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a12f3084-da1a-4065-a77c-f6590cb0cdf5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-khTvkGlVZuB5jf1T_CEe1eefaRcVmLCFCWo24VpLMfjPMGdHAD0WGEfUa9Fa"} {"level":"debug","ts":"2026-07-17T14:43:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a12f3084-da1a-4065-a77c-f6590cb0cdf5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-244a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-khTvkGlVZuB5jf1T_CEe1eefaRcVmLCFCWo24VpLMfjPMGdHAD0WGEfUa9Fa\"}"} {"level":"debug","ts":"2026-07-17T14:43:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a12f3084-da1a-4065-a77c-f6590cb0cdf5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-244a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4a7bfb7a-cc41-40e9-984e-0eb1810cd46f","keyName":"e2e-rate-a-d4fb21","subscription":"e2e-rate-iso-a-d4fb21","tenant":"e2e-shared-a-244a73","userId":"4a7bfb7a-cc41-40e9-984e-0eb1810cd46f","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T14:43:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a12f3084-da1a-4065-a77c-f6590cb0cdf5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-244a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-244a73/rate-test-model-244a73\",\"requestedSubscription\":\"e2e-rate-iso-a-d4fb21\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-17T14:43:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a12f3084-da1a-4065-a77c-f6590cb0cdf5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-244a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-244a73","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d4fb21","namespace":"ai-tenant-e2e-shared-a-244a73","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-17T14:43:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a12f3084-da1a-4065-a77c-f6590cb0cdf5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T14:43:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a12f3084-da1a-4065-a77c-f6590cb0cdf5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:43:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a12f3084-da1a-4065-a77c-f6590cb0cdf5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:43:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a12f3084-da1a-4065-a77c-f6590cb0cdf5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-244a73/rate-test-model-244a73\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-244a73/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:43:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a12f3084-da1a-4065-a77c-f6590cb0cdf5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:43:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a12f3084-da1a-4065-a77c-f6590cb0cdf5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T14:43:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a12f3084-da1a-4065-a77c-f6590cb0cdf5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T14:43:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a12f3084-da1a-4065-a77c-f6590cb0cdf5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d4fb21"} {"level":"debug","ts":"2026-07-17T14:43:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a12f3084-da1a-4065-a77c-f6590cb0cdf5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4a7bfb7a-cc41-40e9-984e-0eb1810cd46f","keyName":"e2e-rate-a-d4fb21","selected_subscription":"e2e-rate-iso-a-d4fb21","selected_subscription_key":"ai-tenant-e2e-shared-a-244a73/e2e-rate-iso-a-d4fb21@ai-tenant-e2e-shared-a-244a73/rate-test-model-244a73","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-244a73","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d4fb21","namespace":"ai-tenant-e2e-shared-a-244a73","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-17T14:43:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a12f3084-da1a-4065-a77c-f6590cb0cdf5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T14:43:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a12f3084-da1a-4065-a77c-f6590cb0cdf5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T14:43:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"649e9774-0d10-4641-b999-73664a8845e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:57026","PortSpecifier":{"PortValue":57026}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.101:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"649e9774-0d10-4641-b999-73664a8845e1","method":"POST","path":"/ai-tenant-e2e-shared-a-244a73/rate-test-model-244a73/v1/completions","host":"e2e-shared-a-244a73.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T14:43:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"649e9774-0d10-4641-b999-73664a8845e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:57026","PortSpecifier":{"PortValue":57026}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.101:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784299408,"nanos":719168541},"http":{"id":"649e9774-0d10-4641-b999-73664a8845e1","method":"POST","headers":{":authority":"e2e-shared-a-244a73.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-244a73/rate-test-model-244a73/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T14:43:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"649e9774-0d10-4641-b999-73664a8845e1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-khTvkGlVZuB5jf1T_CEe1eefaRcVmLCFCWo24VpLMfjPMGdHAD0WGEfUa9Fa"} {"level":"debug","ts":"2026-07-17T14:43:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"649e9774-0d10-4641-b999-73664a8845e1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-244a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-khTvkGlVZuB5jf1T_CEe1eefaRcVmLCFCWo24VpLMfjPMGdHAD0WGEfUa9Fa\"}"} {"level":"debug","ts":"2026-07-17T14:43:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"649e9774-0d10-4641-b999-73664a8845e1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-244a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4a7bfb7a-cc41-40e9-984e-0eb1810cd46f","keyName":"e2e-rate-a-d4fb21","subscription":"e2e-rate-iso-a-d4fb21","tenant":"e2e-shared-a-244a73","userId":"4a7bfb7a-cc41-40e9-984e-0eb1810cd46f","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T14:43:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"649e9774-0d10-4641-b999-73664a8845e1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-244a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-244a73/rate-test-model-244a73\",\"requestedSubscription\":\"e2e-rate-iso-a-d4fb21\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-17T14:43:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"649e9774-0d10-4641-b999-73664a8845e1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-244a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-244a73","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d4fb21","namespace":"ai-tenant-e2e-shared-a-244a73","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-17T14:43:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"649e9774-0d10-4641-b999-73664a8845e1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T14:43:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"649e9774-0d10-4641-b999-73664a8845e1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:43:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"649e9774-0d10-4641-b999-73664a8845e1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:43:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"649e9774-0d10-4641-b999-73664a8845e1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:43:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"649e9774-0d10-4641-b999-73664a8845e1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-244a73/rate-test-model-244a73\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-244a73/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:43:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"649e9774-0d10-4641-b999-73664a8845e1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T14:43:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"649e9774-0d10-4641-b999-73664a8845e1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T14:43:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"649e9774-0d10-4641-b999-73664a8845e1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d4fb21"} {"level":"debug","ts":"2026-07-17T14:43:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"649e9774-0d10-4641-b999-73664a8845e1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4a7bfb7a-cc41-40e9-984e-0eb1810cd46f","keyName":"e2e-rate-a-d4fb21","selected_subscription":"e2e-rate-iso-a-d4fb21","selected_subscription_key":"ai-tenant-e2e-shared-a-244a73/e2e-rate-iso-a-d4fb21@ai-tenant-e2e-shared-a-244a73/rate-test-model-244a73","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-244a73","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d4fb21","namespace":"ai-tenant-e2e-shared-a-244a73","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-17T14:43:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"649e9774-0d10-4641-b999-73664a8845e1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T14:43:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"649e9774-0d10-4641-b999-73664a8845e1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T14:43:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4a2d029d-3860-4a33-879e-e97eed3bbb99","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:57038","PortSpecifier":{"PortValue":57038}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.101:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4a2d029d-3860-4a33-879e-e97eed3bbb99","method":"POST","path":"/ai-tenant-e2e-shared-a-244a73/rate-test-model-244a73/v1/completions","host":"e2e-shared-a-244a73.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T14:43:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4a2d029d-3860-4a33-879e-e97eed3bbb99","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:57038","PortSpecifier":{"PortValue":57038}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.101:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784299409,"nanos":756123182},"http":{"id":"4a2d029d-3860-4a33-879e-e97eed3bbb99","method":"POST","headers":{":authority":"e2e-shared-a-244a73.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-244a73/rate-test-model-244a73/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T14:43:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4a2d029d-3860-4a33-879e-e97eed3bbb99","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-khTvkGlVZuB5jf1T_CEe1eefaRcVmLCFCWo24VpLMfjPMGdHAD0WGEfUa9Fa"} {"level":"debug","ts":"2026-07-17T14:43:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4a2d029d-3860-4a33-879e-e97eed3bbb99","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-244a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-khTvkGlVZuB5jf1T_CEe1eefaRcVmLCFCWo24VpLMfjPMGdHAD0WGEfUa9Fa\"}"} {"level":"debug","ts":"2026-07-17T14:43:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4a2d029d-3860-4a33-879e-e97eed3bbb99","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-244a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4a7bfb7a-cc41-40e9-984e-0eb1810cd46f","keyName":"e2e-rate-a-d4fb21","subscription":"e2e-rate-iso-a-d4fb21","tenant":"e2e-shared-a-244a73","userId":"4a7bfb7a-cc41-40e9-984e-0eb1810cd46f","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T14:43:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4a2d029d-3860-4a33-879e-e97eed3bbb99","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-244a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-244a73/rate-test-model-244a73\",\"requestedSubscription\":\"e2e-rate-iso-a-d4fb21\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-17T14:43:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4a2d029d-3860-4a33-879e-e97eed3bbb99","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-244a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-244a73","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d4fb21","namespace":"ai-tenant-e2e-shared-a-244a73","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-17T14:43:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4a2d029d-3860-4a33-879e-e97eed3bbb99","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T14:43:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a2d029d-3860-4a33-879e-e97eed3bbb99","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:43:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a2d029d-3860-4a33-879e-e97eed3bbb99","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:43:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a2d029d-3860-4a33-879e-e97eed3bbb99","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:43:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a2d029d-3860-4a33-879e-e97eed3bbb99","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-244a73/rate-test-model-244a73\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-244a73/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:43:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a2d029d-3860-4a33-879e-e97eed3bbb99","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T14:43:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a2d029d-3860-4a33-879e-e97eed3bbb99","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T14:43:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a2d029d-3860-4a33-879e-e97eed3bbb99","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d4fb21"} {"level":"debug","ts":"2026-07-17T14:43:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a2d029d-3860-4a33-879e-e97eed3bbb99","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4a7bfb7a-cc41-40e9-984e-0eb1810cd46f","keyName":"e2e-rate-a-d4fb21","selected_subscription":"e2e-rate-iso-a-d4fb21","selected_subscription_key":"ai-tenant-e2e-shared-a-244a73/e2e-rate-iso-a-d4fb21@ai-tenant-e2e-shared-a-244a73/rate-test-model-244a73","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-244a73","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d4fb21","namespace":"ai-tenant-e2e-shared-a-244a73","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-17T14:43:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4a2d029d-3860-4a33-879e-e97eed3bbb99","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T14:43:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4a2d029d-3860-4a33-879e-e97eed3bbb99","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T14:43:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7c209675-6160-4bd0-934f-8326b5cfec37","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:57052","PortSpecifier":{"PortValue":57052}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.101:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7c209675-6160-4bd0-934f-8326b5cfec37","method":"POST","path":"/ai-tenant-e2e-shared-a-244a73/rate-test-model-244a73/v1/completions","host":"e2e-shared-a-244a73.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T14:43:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7c209675-6160-4bd0-934f-8326b5cfec37","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:57052","PortSpecifier":{"PortValue":57052}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.101:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784299410,"nanos":795834362},"http":{"id":"7c209675-6160-4bd0-934f-8326b5cfec37","method":"POST","headers":{":authority":"e2e-shared-a-244a73.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-244a73/rate-test-model-244a73/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T14:43:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7c209675-6160-4bd0-934f-8326b5cfec37","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-khTvkGlVZuB5jf1T_CEe1eefaRcVmLCFCWo24VpLMfjPMGdHAD0WGEfUa9Fa"} {"level":"debug","ts":"2026-07-17T14:43:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7c209675-6160-4bd0-934f-8326b5cfec37","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-244a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-khTvkGlVZuB5jf1T_CEe1eefaRcVmLCFCWo24VpLMfjPMGdHAD0WGEfUa9Fa\"}"} {"level":"debug","ts":"2026-07-17T14:43:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7c209675-6160-4bd0-934f-8326b5cfec37","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-244a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4a7bfb7a-cc41-40e9-984e-0eb1810cd46f","keyName":"e2e-rate-a-d4fb21","subscription":"e2e-rate-iso-a-d4fb21","tenant":"e2e-shared-a-244a73","userId":"4a7bfb7a-cc41-40e9-984e-0eb1810cd46f","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T14:43:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7c209675-6160-4bd0-934f-8326b5cfec37","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-244a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-244a73/rate-test-model-244a73\",\"requestedSubscription\":\"e2e-rate-iso-a-d4fb21\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-17T14:43:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7c209675-6160-4bd0-934f-8326b5cfec37","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-244a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-244a73","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d4fb21","namespace":"ai-tenant-e2e-shared-a-244a73","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-17T14:43:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7c209675-6160-4bd0-934f-8326b5cfec37","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T14:43:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c209675-6160-4bd0-934f-8326b5cfec37","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:43:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c209675-6160-4bd0-934f-8326b5cfec37","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:43:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c209675-6160-4bd0-934f-8326b5cfec37","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:43:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7c209675-6160-4bd0-934f-8326b5cfec37","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-244a73/rate-test-model-244a73\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-244a73/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:43:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c209675-6160-4bd0-934f-8326b5cfec37","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T14:43:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c209675-6160-4bd0-934f-8326b5cfec37","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d4fb21"} {"level":"debug","ts":"2026-07-17T14:43:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c209675-6160-4bd0-934f-8326b5cfec37","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T14:43:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7c209675-6160-4bd0-934f-8326b5cfec37","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4a7bfb7a-cc41-40e9-984e-0eb1810cd46f","keyName":"e2e-rate-a-d4fb21","selected_subscription":"e2e-rate-iso-a-d4fb21","selected_subscription_key":"ai-tenant-e2e-shared-a-244a73/e2e-rate-iso-a-d4fb21@ai-tenant-e2e-shared-a-244a73/rate-test-model-244a73","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-244a73","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d4fb21","namespace":"ai-tenant-e2e-shared-a-244a73","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-17T14:43:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7c209675-6160-4bd0-934f-8326b5cfec37","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T14:43:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7c209675-6160-4bd0-934f-8326b5cfec37","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T14:43:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c7b3b43f-6625-49bf-893b-d8c1c4e8343e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:48600","PortSpecifier":{"PortValue":48600}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.101:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c7b3b43f-6625-49bf-893b-d8c1c4e8343e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-244a73.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T14:43:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c7b3b43f-6625-49bf-893b-d8c1c4e8343e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:48600","PortSpecifier":{"PortValue":48600}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.101:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784299419,"nanos":688853578},"http":{"id":"c7b3b43f-6625-49bf-893b-d8c1c4e8343e","method":"POST","headers":{":authority":"e2e-shared-a-244a73.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T14:43:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c7b3b43f-6625-49bf-893b-d8c1c4e8343e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T14:43:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c7b3b43f-6625-49bf-893b-d8c1c4e8343e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"de491402-0b93-4648-a022-505c097cd610","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e645c696-460f-41b3-b391-2e55602b163a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c3765a88c95"]}} {"level":"debug","ts":"2026-07-17T14:43:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c7b3b43f-6625-49bf-893b-d8c1c4e8343e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c3765a88c95"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e645c696-460f-41b3-b391-2e55602b163a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de491402-0b93-4648-a022-505c097cd610","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b9a9673d41f2de079fe25aeb77889a2054753385a477ec9d8c0e96179d8f04c5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.101:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-244a73.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T14:43:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7b3b43f-6625-49bf-893b-d8c1c4e8343e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:43:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7b3b43f-6625-49bf-893b-d8c1c4e8343e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:43:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7b3b43f-6625-49bf-893b-d8c1c4e8343e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-244a73/rate-test-model-244a73\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-244a73/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:43:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c7b3b43f-6625-49bf-893b-d8c1c4e8343e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T14:43:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c7b3b43f-6625-49bf-893b-d8c1c4e8343e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T14:43:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c7b3b43f-6625-49bf-893b-d8c1c4e8343e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T14:43:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c7b3b43f-6625-49bf-893b-d8c1c4e8343e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T14:43:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c7b3b43f-6625-49bf-893b-d8c1c4e8343e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T14:43:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2209b045-0fe7-4963-ab92-05611c41e8c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:45982","PortSpecifier":{"PortValue":45982}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.102:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2209b045-0fe7-4963-ab92-05611c41e8c9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-9eb655.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T14:43:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2209b045-0fe7-4963-ab92-05611c41e8c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:45982","PortSpecifier":{"PortValue":45982}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.102:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784299419,"nanos":720581471},"http":{"id":"2209b045-0fe7-4963-ab92-05611c41e8c9","method":"POST","headers":{":authority":"e2e-shared-b-9eb655.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T14:43:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2209b045-0fe7-4963-ab92-05611c41e8c9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-17T14:43:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2209b045-0fe7-4963-ab92-05611c41e8c9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"de491402-0b93-4648-a022-505c097cd610","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e645c696-460f-41b3-b391-2e55602b163a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c3765a88c95"]}} {"level":"debug","ts":"2026-07-17T14:43:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2209b045-0fe7-4963-ab92-05611c41e8c9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1c3765a88c95"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e645c696-460f-41b3-b391-2e55602b163a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"de491402-0b93-4648-a022-505c097cd610","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.102:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-9eb655.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T14:43:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2209b045-0fe7-4963-ab92-05611c41e8c9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:43:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2209b045-0fe7-4963-ab92-05611c41e8c9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:43:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2209b045-0fe7-4963-ab92-05611c41e8c9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-9eb655/rate-test-model-9eb655\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-9eb655/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:43:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2209b045-0fe7-4963-ab92-05611c41e8c9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-17T14:43:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2209b045-0fe7-4963-ab92-05611c41e8c9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T14:43:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2209b045-0fe7-4963-ab92-05611c41e8c9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-17T14:43:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2209b045-0fe7-4963-ab92-05611c41e8c9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T14:43:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2209b045-0fe7-4963-ab92-05611c41e8c9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T14:43:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c6d4e821-6c33-47ec-95ba-6697f2ec6c7e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:48612","PortSpecifier":{"PortValue":48612}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.101:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c6d4e821-6c33-47ec-95ba-6697f2ec6c7e","method":"POST","path":"/ai-tenant-e2e-shared-a-244a73/rate-test-model-244a73/v1/completions","host":"e2e-shared-a-244a73.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T14:43:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c6d4e821-6c33-47ec-95ba-6697f2ec6c7e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:48612","PortSpecifier":{"PortValue":48612}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.101:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784299419,"nanos":754424189},"http":{"id":"c6d4e821-6c33-47ec-95ba-6697f2ec6c7e","method":"POST","headers":{":authority":"e2e-shared-a-244a73.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-244a73/rate-test-model-244a73/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T14:43:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c6d4e821-6c33-47ec-95ba-6697f2ec6c7e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-4OkVPGnvqxNwxQVs_6yeEDQgtTWL1L3kdmC4aWxBAork1YJ3EBmbuEx92Koe"} {"level":"debug","ts":"2026-07-17T14:43:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c6d4e821-6c33-47ec-95ba-6697f2ec6c7e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-244a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-4OkVPGnvqxNwxQVs_6yeEDQgtTWL1L3kdmC4aWxBAork1YJ3EBmbuEx92Koe\"}"} {"level":"debug","ts":"2026-07-17T14:43:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c6d4e821-6c33-47ec-95ba-6697f2ec6c7e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-244a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"93455659-d16e-40b4-b7d1-79e5557c4a22","keyName":"e2e-rate-a-3c7776","subscription":"e2e-rate-iso-a-3c7776","tenant":"e2e-shared-a-244a73","userId":"93455659-d16e-40b4-b7d1-79e5557c4a22","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T14:43:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c6d4e821-6c33-47ec-95ba-6697f2ec6c7e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-244a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-244a73/rate-test-model-244a73\",\"requestedSubscription\":\"e2e-rate-iso-a-3c7776\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-17T14:43:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c6d4e821-6c33-47ec-95ba-6697f2ec6c7e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-244a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-244a73","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3c7776","namespace":"ai-tenant-e2e-shared-a-244a73","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-17T14:43:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c6d4e821-6c33-47ec-95ba-6697f2ec6c7e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T14:43:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6d4e821-6c33-47ec-95ba-6697f2ec6c7e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:43:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6d4e821-6c33-47ec-95ba-6697f2ec6c7e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:43:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6d4e821-6c33-47ec-95ba-6697f2ec6c7e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:43:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6d4e821-6c33-47ec-95ba-6697f2ec6c7e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-244a73/rate-test-model-244a73\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-244a73/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:43:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6d4e821-6c33-47ec-95ba-6697f2ec6c7e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T14:43:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6d4e821-6c33-47ec-95ba-6697f2ec6c7e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-3c7776"} {"level":"debug","ts":"2026-07-17T14:43:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6d4e821-6c33-47ec-95ba-6697f2ec6c7e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T14:43:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6d4e821-6c33-47ec-95ba-6697f2ec6c7e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"93455659-d16e-40b4-b7d1-79e5557c4a22","keyName":"e2e-rate-a-3c7776","selected_subscription":"e2e-rate-iso-a-3c7776","selected_subscription_key":"ai-tenant-e2e-shared-a-244a73/e2e-rate-iso-a-3c7776@ai-tenant-e2e-shared-a-244a73/rate-test-model-244a73","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-244a73","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3c7776","namespace":"ai-tenant-e2e-shared-a-244a73","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-17T14:43:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c6d4e821-6c33-47ec-95ba-6697f2ec6c7e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T14:43:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c6d4e821-6c33-47ec-95ba-6697f2ec6c7e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T14:43:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4a7519a3-a842-4760-963d-8953683e74ed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:48618","PortSpecifier":{"PortValue":48618}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.101:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4a7519a3-a842-4760-963d-8953683e74ed","method":"POST","path":"/ai-tenant-e2e-shared-a-244a73/rate-test-model-244a73/v1/completions","host":"e2e-shared-a-244a73.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T14:43:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4a7519a3-a842-4760-963d-8953683e74ed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:48618","PortSpecifier":{"PortValue":48618}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.101:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784299420,"nanos":789573323},"http":{"id":"4a7519a3-a842-4760-963d-8953683e74ed","method":"POST","headers":{":authority":"e2e-shared-a-244a73.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-244a73/rate-test-model-244a73/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T14:43:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4a7519a3-a842-4760-963d-8953683e74ed","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-4OkVPGnvqxNwxQVs_6yeEDQgtTWL1L3kdmC4aWxBAork1YJ3EBmbuEx92Koe"} {"level":"debug","ts":"2026-07-17T14:43:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4a7519a3-a842-4760-963d-8953683e74ed","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-244a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-4OkVPGnvqxNwxQVs_6yeEDQgtTWL1L3kdmC4aWxBAork1YJ3EBmbuEx92Koe\"}"} {"level":"debug","ts":"2026-07-17T14:43:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4a7519a3-a842-4760-963d-8953683e74ed","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-244a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"93455659-d16e-40b4-b7d1-79e5557c4a22","keyName":"e2e-rate-a-3c7776","subscription":"e2e-rate-iso-a-3c7776","tenant":"e2e-shared-a-244a73","userId":"93455659-d16e-40b4-b7d1-79e5557c4a22","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T14:43:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4a7519a3-a842-4760-963d-8953683e74ed","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-244a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-244a73/rate-test-model-244a73\",\"requestedSubscription\":\"e2e-rate-iso-a-3c7776\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-17T14:43:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4a7519a3-a842-4760-963d-8953683e74ed","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-244a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-244a73","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3c7776","namespace":"ai-tenant-e2e-shared-a-244a73","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-17T14:43:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4a7519a3-a842-4760-963d-8953683e74ed","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T14:43:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a7519a3-a842-4760-963d-8953683e74ed","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:43:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a7519a3-a842-4760-963d-8953683e74ed","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:43:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a7519a3-a842-4760-963d-8953683e74ed","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-244a73/rate-test-model-244a73\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-244a73/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:43:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a7519a3-a842-4760-963d-8953683e74ed","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:43:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a7519a3-a842-4760-963d-8953683e74ed","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T14:43:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a7519a3-a842-4760-963d-8953683e74ed","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-3c7776"} {"level":"debug","ts":"2026-07-17T14:43:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a7519a3-a842-4760-963d-8953683e74ed","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T14:43:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a7519a3-a842-4760-963d-8953683e74ed","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"93455659-d16e-40b4-b7d1-79e5557c4a22","keyName":"e2e-rate-a-3c7776","selected_subscription":"e2e-rate-iso-a-3c7776","selected_subscription_key":"ai-tenant-e2e-shared-a-244a73/e2e-rate-iso-a-3c7776@ai-tenant-e2e-shared-a-244a73/rate-test-model-244a73","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-244a73","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3c7776","namespace":"ai-tenant-e2e-shared-a-244a73","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-17T14:43:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4a7519a3-a842-4760-963d-8953683e74ed","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T14:43:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4a7519a3-a842-4760-963d-8953683e74ed","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T14:43:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d82b61a-0a4c-42af-a28b-6c0b212d66c3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:51908","PortSpecifier":{"PortValue":51908}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.101:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0d82b61a-0a4c-42af-a28b-6c0b212d66c3","method":"POST","path":"/ai-tenant-e2e-shared-a-244a73/rate-test-model-244a73/v1/completions","host":"e2e-shared-a-244a73.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T14:43:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d82b61a-0a4c-42af-a28b-6c0b212d66c3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:51908","PortSpecifier":{"PortValue":51908}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.101:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784299421,"nanos":830238521},"http":{"id":"0d82b61a-0a4c-42af-a28b-6c0b212d66c3","method":"POST","headers":{":authority":"e2e-shared-a-244a73.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-244a73/rate-test-model-244a73/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T14:43:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0d82b61a-0a4c-42af-a28b-6c0b212d66c3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-4OkVPGnvqxNwxQVs_6yeEDQgtTWL1L3kdmC4aWxBAork1YJ3EBmbuEx92Koe"} {"level":"debug","ts":"2026-07-17T14:43:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0d82b61a-0a4c-42af-a28b-6c0b212d66c3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-244a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-4OkVPGnvqxNwxQVs_6yeEDQgtTWL1L3kdmC4aWxBAork1YJ3EBmbuEx92Koe\"}"} {"level":"debug","ts":"2026-07-17T14:43:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0d82b61a-0a4c-42af-a28b-6c0b212d66c3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-244a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"93455659-d16e-40b4-b7d1-79e5557c4a22","keyName":"e2e-rate-a-3c7776","subscription":"e2e-rate-iso-a-3c7776","tenant":"e2e-shared-a-244a73","userId":"93455659-d16e-40b4-b7d1-79e5557c4a22","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T14:43:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0d82b61a-0a4c-42af-a28b-6c0b212d66c3","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-244a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-244a73/rate-test-model-244a73\",\"requestedSubscription\":\"e2e-rate-iso-a-3c7776\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-17T14:43:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0d82b61a-0a4c-42af-a28b-6c0b212d66c3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-244a73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-244a73","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3c7776","namespace":"ai-tenant-e2e-shared-a-244a73","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-17T14:43:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0d82b61a-0a4c-42af-a28b-6c0b212d66c3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T14:43:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d82b61a-0a4c-42af-a28b-6c0b212d66c3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:43:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d82b61a-0a4c-42af-a28b-6c0b212d66c3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:43:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d82b61a-0a4c-42af-a28b-6c0b212d66c3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-244a73/rate-test-model-244a73\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-244a73/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:43:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d82b61a-0a4c-42af-a28b-6c0b212d66c3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:43:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d82b61a-0a4c-42af-a28b-6c0b212d66c3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T14:43:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d82b61a-0a4c-42af-a28b-6c0b212d66c3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-3c7776"} {"level":"debug","ts":"2026-07-17T14:43:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d82b61a-0a4c-42af-a28b-6c0b212d66c3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T14:43:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d82b61a-0a4c-42af-a28b-6c0b212d66c3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"93455659-d16e-40b4-b7d1-79e5557c4a22","keyName":"e2e-rate-a-3c7776","selected_subscription":"e2e-rate-iso-a-3c7776","selected_subscription_key":"ai-tenant-e2e-shared-a-244a73/e2e-rate-iso-a-3c7776@ai-tenant-e2e-shared-a-244a73/rate-test-model-244a73","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-244a73","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3c7776","namespace":"ai-tenant-e2e-shared-a-244a73","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-17T14:43:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d82b61a-0a4c-42af-a28b-6c0b212d66c3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T14:43:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d82b61a-0a4c-42af-a28b-6c0b212d66c3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T14:43:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3a016d67-63d9-488a-bdba-5b0468a7badc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:48814","PortSpecifier":{"PortValue":48814}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.102:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3a016d67-63d9-488a-bdba-5b0468a7badc","method":"POST","path":"/ai-tenant-e2e-shared-b-9eb655/rate-test-model-9eb655/v1/completions","host":"e2e-shared-b-9eb655.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-17T14:43:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3a016d67-63d9-488a-bdba-5b0468a7badc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:48814","PortSpecifier":{"PortValue":48814}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.102:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784299421,"nanos":868207063},"http":{"id":"3a016d67-63d9-488a-bdba-5b0468a7badc","method":"POST","headers":{":authority":"e2e-shared-b-9eb655.apps.b5ed5b8f-d5f9-462a-8f52-1c3765a88c95.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-9eb655/rate-test-model-9eb655/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T14:43:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3a016d67-63d9-488a-bdba-5b0468a7badc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-19BIgO4ozAZyWLB7J_LKD6439gwllHERkg6Y8nsYagvQig1ZMolOWzJytB0Ea"} {"level":"debug","ts":"2026-07-17T14:43:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3a016d67-63d9-488a-bdba-5b0468a7badc","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-9eb655.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-19BIgO4ozAZyWLB7J_LKD6439gwllHERkg6Y8nsYagvQig1ZMolOWzJytB0Ea\"}"} {"level":"debug","ts":"2026-07-17T14:43:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3a016d67-63d9-488a-bdba-5b0468a7badc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-9eb655.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c493b0be-abd0-4444-8192-3b703c8cfd7a","keyName":"e2e-rate-b-3c7776","subscription":"e2e-rate-iso-b-3c7776","tenant":"e2e-shared-b-9eb655","userId":"c493b0be-abd0-4444-8192-3b703c8cfd7a","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-17T14:43:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3a016d67-63d9-488a-bdba-5b0468a7badc","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-9eb655.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-9eb655/rate-test-model-9eb655\",\"requestedSubscription\":\"e2e-rate-iso-b-3c7776\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-17T14:43:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3a016d67-63d9-488a-bdba-5b0468a7badc","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-9eb655.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9eb655","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-3c7776","namespace":"ai-tenant-e2e-shared-b-9eb655","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-17T14:43:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3a016d67-63d9-488a-bdba-5b0468a7badc","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-17T14:43:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a016d67-63d9-488a-bdba-5b0468a7badc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:43:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a016d67-63d9-488a-bdba-5b0468a7badc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:43:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a016d67-63d9-488a-bdba-5b0468a7badc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-9eb655/rate-test-model-9eb655\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-9eb655/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:43:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a016d67-63d9-488a-bdba-5b0468a7badc","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-17T14:43:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a016d67-63d9-488a-bdba-5b0468a7badc","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-3c7776"} {"level":"debug","ts":"2026-07-17T14:43:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a016d67-63d9-488a-bdba-5b0468a7badc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-17T14:43:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a016d67-63d9-488a-bdba-5b0468a7badc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-17T14:43:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a016d67-63d9-488a-bdba-5b0468a7badc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c493b0be-abd0-4444-8192-3b703c8cfd7a","keyName":"e2e-rate-b-3c7776","selected_subscription":"e2e-rate-iso-b-3c7776","selected_subscription_key":"ai-tenant-e2e-shared-b-9eb655/e2e-rate-iso-b-3c7776@ai-tenant-e2e-shared-b-9eb655/rate-test-model-9eb655","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9eb655","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-3c7776","namespace":"ai-tenant-e2e-shared-b-9eb655","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-17T14:43:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3a016d67-63d9-488a-bdba-5b0468a7badc","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-17T14:43:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3a016d67-63d9-488a-bdba-5b0468a7badc","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-17T14:43:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/738ab529ddd28eabc85a6d91f69e2389b88a7dcdd05891f27751706cd378889f"} {"level":"info","ts":"2026-07-17T14:43:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/80824e2a5efa824dbf5b00aa2b9ec6c48ff59f27656fb6f19a4990f10e86202e"} {"level":"info","ts":"2026-07-17T14:43:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c9730b9292598ff4deee3bca6c37a6bac07de7f10d7b8f59651e68b5a56de3cc"} {"level":"info","ts":"2026-07-17T14:43:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2b8730da41510b2790d7fb3a6b9c3ff3648357c9755a987c6f69c8b1c4774126"} {"level":"info","ts":"2026-07-17T14:43:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0c19962786ac743137b6461d8e2aacb99d301e3904d81f28696b6c2acd4bb2a4"} {"level":"info","ts":"2026-07-17T14:43:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c05272fafcec8b032fc04cdee61ff716e84611aef6f955968d803f7841edec6"} {"level":"info","ts":"2026-07-17T14:43:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7ef9d0bbf3a3694d180c2cd57488d7e424f6d657b3499be07013facfeca870b3"} {"level":"info","ts":"2026-07-17T14:43:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/243736032ee0d91263cc16fd44e5a2cd8457605fd6f2f7fb29a1dd889448169b"} {"level":"info","ts":"2026-07-17T14:43:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/14f613dc696036dd331ccc040914fc4446c2f266c7a293f944276b9768d2bc32"} {"level":"info","ts":"2026-07-17T14:43:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/07b2c1a53c9c47042926fc7b0a9f08713a10a86351ec635e6a6579e3e3e60357"} {"level":"info","ts":"2026-07-17T14:43:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/242816cbdc7e3892a60ed840dbb1b7c34a627149b9a4a51b633cbdc94a0106b6"} {"level":"info","ts":"2026-07-17T14:43:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/37355cb6365806d26f7ef64def480b86fa6753790189345f0d6deb76db9856a5"} {"level":"info","ts":"2026-07-17T14:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/04f5509afa3bb7abc9322fecd3ccc3b1dae766172ea77e1789bde47971712391"} {"level":"info","ts":"2026-07-17T14:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/30733d77045bfdf6758cac0c7064bb74ed878b7a90a7000b58dd213804051451"} {"level":"info","ts":"2026-07-17T14:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9af40badfdddecd71921886d8c967922fad1c02538c62648762bce9b056dd011"} {"level":"info","ts":"2026-07-17T14:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fe561478066f039a7cf23b77f9a8bd06849f747349731cc3b32bb04af7a23861"} {"level":"info","ts":"2026-07-17T14:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2f6701f932a9eb5d95dcce539fb74bcbdd4c77194e121a436126cf72072a0ea6"} {"level":"info","ts":"2026-07-17T14:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b9a9673d41f2de079fe25aeb77889a2054753385a477ec9d8c0e96179d8f04c5"} {"level":"info","ts":"2026-07-17T14:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7703402a556afda2f76fba8bde2621401b34608e99b9229937d18618c0a9c9f3"} {"level":"info","ts":"2026-07-17T14:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dc11e581c5e12cdf1e0f4b21f9e37eb3b53df854df5706625422e75e8a861d96"} {"level":"info","ts":"2026-07-17T14:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f2ebc6af15123ac7549493e1ce3127148d5ed04f0212313165af22862b5bdc7"} {"level":"info","ts":"2026-07-17T14:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/edb0230cdcacafe3d931342d0bd127cb7e49c6904c9bbdd8add68bbaabe0f84f"} {"level":"info","ts":"2026-07-17T14:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e179813b948c90231c5c217e78a18c8845c86dc97c5ab1780b57cab2cff21ed3"} {"level":"info","ts":"2026-07-17T14:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b564ebe9e9d87f40a0f3dac52e7e9e87250da6526fbc6ba3e71b71428938b9e5"}