--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"info","ts":"2026-07-23T12:51:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f54f1d80-b6db-48a6-963c-e3af25869aa1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:58570","PortSpecifier":{"PortValue":58570}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f54f1d80-b6db-48a6-963c-e3af25869aa1","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-d45fc5.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T12:51:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f54f1d80-b6db-48a6-963c-e3af25869aa1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:58570","PortSpecifier":{"PortValue":58570}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784811114,"nanos":95714025},"http":{"id":"f54f1d80-b6db-48a6-963c-e3af25869aa1","method":"GET","headers":{":authority":"e2e-shared-a-d45fc5.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T12:51:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f54f1d80-b6db-48a6-963c-e3af25869aa1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1bFd2dNKUoYgJpnZS_9rRuuEbtorT4XL7cKzqSxMre283upHqE3HqGnqnvl04"} {"level":"debug","ts":"2026-07-23T12:51:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f54f1d80-b6db-48a6-963c-e3af25869aa1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d45fc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1bFd2dNKUoYgJpnZS_9rRuuEbtorT4XL7cKzqSxMre283upHqE3HqGnqnvl04\"}"} {"level":"debug","ts":"2026-07-23T12:51:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f54f1d80-b6db-48a6-963c-e3af25869aa1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d45fc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7f2753fd-0c96-4366-9b0f-3d453cedc2a9","keyName":"e2e-auth-iso-a-c0468d","subscription":"e2e-auth-iso-860b0d","tenant":"e2e-shared-a-d45fc5","userId":"7f2753fd-0c96-4366-9b0f-3d453cedc2a9","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T12:51:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f54f1d80-b6db-48a6-963c-e3af25869aa1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T12:51:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f54f1d80-b6db-48a6-963c-e3af25869aa1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:51:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f54f1d80-b6db-48a6-963c-e3af25869aa1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:51:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f54f1d80-b6db-48a6-963c-e3af25869aa1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d45fc5/auth-test-model-d45fc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d45fc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:51:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f54f1d80-b6db-48a6-963c-e3af25869aa1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T12:51:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f54f1d80-b6db-48a6-963c-e3af25869aa1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-23T12:51:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f54f1d80-b6db-48a6-963c-e3af25869aa1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T12:51:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f54f1d80-b6db-48a6-963c-e3af25869aa1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-860b0d"} {"level":"info","ts":"2026-07-23T12:51:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f54f1d80-b6db-48a6-963c-e3af25869aa1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T12:51:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f54f1d80-b6db-48a6-963c-e3af25869aa1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T12:52:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad"} {"level":"info","ts":"2026-07-23T12:52:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/452fefd9dfaa3552263fab027aebcb45b9f8e33d6a082f8304c9aa165c0f2783"} {"level":"info","ts":"2026-07-23T12:52:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2"} {"level":"info","ts":"2026-07-23T12:52:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34"} {"level":"info","ts":"2026-07-23T12:52:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a"} {"level":"info","ts":"2026-07-23T12:52:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91"} {"level":"info","ts":"2026-07-23T12:52:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294"} {"level":"info","ts":"2026-07-23T12:52:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4e99badf14e58e0a5bf347b28670177a8ae3aac1a214bf919b04892fa5918098"} {"level":"info","ts":"2026-07-23T12:52:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd"} {"level":"info","ts":"2026-07-23T12:52:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ae4b04fcf59b021fe8bd84c75de6a2cc7008f38d826b5789efb24e4fc6cc861f"} {"level":"info","ts":"2026-07-23T12:52:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a"} {"level":"info","ts":"2026-07-23T12:52:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a"} {"level":"debug","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34"} {"level":"info","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34"} {"level":"info","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34"} {"level":"debug","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34"} {"level":"debug","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34"} {"level":"debug","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34"} {"level":"debug","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a"} {"level":"debug","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a"} {"level":"debug","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd"} {"level":"debug","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a"} {"level":"info","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd"} {"level":"info","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a"} {"level":"info","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd"} {"level":"info","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a"} {"level":"info","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a"} {"level":"debug","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd"} {"level":"info","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a"} {"level":"debug","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae4b04fcf59b021fe8bd84c75de6a2cc7008f38d826b5789efb24e4fc6cc861f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae4b04fcf59b021fe8bd84c75de6a2cc7008f38d826b5789efb24e4fc6cc861f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae4b04fcf59b021fe8bd84c75de6a2cc7008f38d826b5789efb24e4fc6cc861f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae4b04fcf59b021fe8bd84c75de6a2cc7008f38d826b5789efb24e4fc6cc861f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae4b04fcf59b021fe8bd84c75de6a2cc7008f38d826b5789efb24e4fc6cc861f"} {"level":"debug","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae4b04fcf59b021fe8bd84c75de6a2cc7008f38d826b5789efb24e4fc6cc861f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae4b04fcf59b021fe8bd84c75de6a2cc7008f38d826b5789efb24e4fc6cc861f"} {"level":"debug","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae4b04fcf59b021fe8bd84c75de6a2cc7008f38d826b5789efb24e4fc6cc861f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae4b04fcf59b021fe8bd84c75de6a2cc7008f38d826b5789efb24e4fc6cc861f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae4b04fcf59b021fe8bd84c75de6a2cc7008f38d826b5789efb24e4fc6cc861f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae4b04fcf59b021fe8bd84c75de6a2cc7008f38d826b5789efb24e4fc6cc861f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae4b04fcf59b021fe8bd84c75de6a2cc7008f38d826b5789efb24e4fc6cc861f"} {"level":"debug","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91"} {"level":"debug","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91"} {"level":"debug","ts":"2026-07-23T12:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91"} {"level":"debug","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad"} {"level":"debug","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad"} {"level":"debug","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e99badf14e58e0a5bf347b28670177a8ae3aac1a214bf919b04892fa5918098","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e99badf14e58e0a5bf347b28670177a8ae3aac1a214bf919b04892fa5918098","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e99badf14e58e0a5bf347b28670177a8ae3aac1a214bf919b04892fa5918098","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e99badf14e58e0a5bf347b28670177a8ae3aac1a214bf919b04892fa5918098"} {"level":"info","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e99badf14e58e0a5bf347b28670177a8ae3aac1a214bf919b04892fa5918098","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e99badf14e58e0a5bf347b28670177a8ae3aac1a214bf919b04892fa5918098","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e99badf14e58e0a5bf347b28670177a8ae3aac1a214bf919b04892fa5918098"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4e99badf14e58e0a5bf347b28670177a8ae3aac1a214bf919b04892fa5918098","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4e99badf14e58e0a5bf347b28670177a8ae3aac1a214bf919b04892fa5918098\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e99badf14e58e0a5bf347b28670177a8ae3aac1a214bf919b04892fa5918098","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e99badf14e58e0a5bf347b28670177a8ae3aac1a214bf919b04892fa5918098"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad"} {"level":"info","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e99badf14e58e0a5bf347b28670177a8ae3aac1a214bf919b04892fa5918098","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e99badf14e58e0a5bf347b28670177a8ae3aac1a214bf919b04892fa5918098","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e99badf14e58e0a5bf347b28670177a8ae3aac1a214bf919b04892fa5918098","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e99badf14e58e0a5bf347b28670177a8ae3aac1a214bf919b04892fa5918098"} {"level":"info","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e99badf14e58e0a5bf347b28670177a8ae3aac1a214bf919b04892fa5918098","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e99badf14e58e0a5bf347b28670177a8ae3aac1a214bf919b04892fa5918098","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4e99badf14e58e0a5bf347b28670177a8ae3aac1a214bf919b04892fa5918098","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4e99badf14e58e0a5bf347b28670177a8ae3aac1a214bf919b04892fa5918098\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e99badf14e58e0a5bf347b28670177a8ae3aac1a214bf919b04892fa5918098","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e99badf14e58e0a5bf347b28670177a8ae3aac1a214bf919b04892fa5918098","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e99badf14e58e0a5bf347b28670177a8ae3aac1a214bf919b04892fa5918098"} {"level":"info","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e99badf14e58e0a5bf347b28670177a8ae3aac1a214bf919b04892fa5918098"} {"level":"debug","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e99badf14e58e0a5bf347b28670177a8ae3aac1a214bf919b04892fa5918098","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e99badf14e58e0a5bf347b28670177a8ae3aac1a214bf919b04892fa5918098"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e99badf14e58e0a5bf347b28670177a8ae3aac1a214bf919b04892fa5918098","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e99badf14e58e0a5bf347b28670177a8ae3aac1a214bf919b04892fa5918098","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e99badf14e58e0a5bf347b28670177a8ae3aac1a214bf919b04892fa5918098"} {"level":"info","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294"} {"level":"info","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294"} {"level":"info","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294"} {"level":"debug","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"452fefd9dfaa3552263fab027aebcb45b9f8e33d6a082f8304c9aa165c0f2783","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"452fefd9dfaa3552263fab027aebcb45b9f8e33d6a082f8304c9aa165c0f2783","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"452fefd9dfaa3552263fab027aebcb45b9f8e33d6a082f8304c9aa165c0f2783","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/452fefd9dfaa3552263fab027aebcb45b9f8e33d6a082f8304c9aa165c0f2783"} {"level":"info","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"452fefd9dfaa3552263fab027aebcb45b9f8e33d6a082f8304c9aa165c0f2783","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/452fefd9dfaa3552263fab027aebcb45b9f8e33d6a082f8304c9aa165c0f2783"} {"level":"debug","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"452fefd9dfaa3552263fab027aebcb45b9f8e33d6a082f8304c9aa165c0f2783","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["452fefd9dfaa3552263fab027aebcb45b9f8e33d6a082f8304c9aa165c0f2783"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294"} {"level":"info","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"452fefd9dfaa3552263fab027aebcb45b9f8e33d6a082f8304c9aa165c0f2783","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"452fefd9dfaa3552263fab027aebcb45b9f8e33d6a082f8304c9aa165c0f2783","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"452fefd9dfaa3552263fab027aebcb45b9f8e33d6a082f8304c9aa165c0f2783","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"452fefd9dfaa3552263fab027aebcb45b9f8e33d6a082f8304c9aa165c0f2783","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"452fefd9dfaa3552263fab027aebcb45b9f8e33d6a082f8304c9aa165c0f2783","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/452fefd9dfaa3552263fab027aebcb45b9f8e33d6a082f8304c9aa165c0f2783"} {"level":"debug","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/452fefd9dfaa3552263fab027aebcb45b9f8e33d6a082f8304c9aa165c0f2783"} {"level":"info","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"452fefd9dfaa3552263fab027aebcb45b9f8e33d6a082f8304c9aa165c0f2783","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["452fefd9dfaa3552263fab027aebcb45b9f8e33d6a082f8304c9aa165c0f2783"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"452fefd9dfaa3552263fab027aebcb45b9f8e33d6a082f8304c9aa165c0f2783","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a"} {"level":"info","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"452fefd9dfaa3552263fab027aebcb45b9f8e33d6a082f8304c9aa165c0f2783","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a"} {"level":"info","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/452fefd9dfaa3552263fab027aebcb45b9f8e33d6a082f8304c9aa165c0f2783"} {"level":"debug","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a"} {"level":"info","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a"} {"level":"debug","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2"} {"level":"info","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2"} {"level":"info","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2"} {"level":"info","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2"} {"level":"debug","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2"} {"level":"info","ts":"2026-07-23T12:52:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8c84ddd0-aef9-4a28-a11b-09b725dcef94","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:36134","PortSpecifier":{"PortValue":36134}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8c84ddd0-aef9-4a28-a11b-09b725dcef94","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d45fc5.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T12:52:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8c84ddd0-aef9-4a28-a11b-09b725dcef94","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:36134","PortSpecifier":{"PortValue":36134}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784811133,"nanos":522579807},"http":{"id":"8c84ddd0-aef9-4a28-a11b-09b725dcef94","method":"POST","headers":{":authority":"e2e-shared-a-d45fc5.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T12:52:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8c84ddd0-aef9-4a28-a11b-09b725dcef94","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T12:52:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8c84ddd0-aef9-4a28-a11b-09b725dcef94","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"687ee252-a56c-49e3-84a4-23a94a9873c7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=30e8b036-3ed3-43e5-931c-4159ec0e5ea7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9e9814df6731"]}} {"level":"debug","ts":"2026-07-23T12:52:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8c84ddd0-aef9-4a28-a11b-09b725dcef94","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9e9814df6731"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=30e8b036-3ed3-43e5-931c-4159ec0e5ea7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"687ee252-a56c-49e3-84a4-23a94a9873c7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9ba07fd8b959add16591f284c3e9b9030166090aa09b8a3555860b1c161e1e38"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d45fc5.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T12:52:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c84ddd0-aef9-4a28-a11b-09b725dcef94","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:52:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c84ddd0-aef9-4a28-a11b-09b725dcef94","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:52:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c84ddd0-aef9-4a28-a11b-09b725dcef94","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d45fc5/auth-test-model-d45fc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d45fc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:52:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8c84ddd0-aef9-4a28-a11b-09b725dcef94","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T12:52:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c84ddd0-aef9-4a28-a11b-09b725dcef94","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T12:52:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c84ddd0-aef9-4a28-a11b-09b725dcef94","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-23T12:52:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8c84ddd0-aef9-4a28-a11b-09b725dcef94","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T12:52:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8c84ddd0-aef9-4a28-a11b-09b725dcef94","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T12:52:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9275a9ef-a766-4de0-b735-c5958636ad95","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:51646","PortSpecifier":{"PortValue":51646}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9275a9ef-a766-4de0-b735-c5958636ad95","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-474ecb.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T12:52:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9275a9ef-a766-4de0-b735-c5958636ad95","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:51646","PortSpecifier":{"PortValue":51646}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784811133,"nanos":559115844},"http":{"id":"9275a9ef-a766-4de0-b735-c5958636ad95","method":"POST","headers":{":authority":"e2e-shared-b-474ecb.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T12:52:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9275a9ef-a766-4de0-b735-c5958636ad95","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T12:52:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9275a9ef-a766-4de0-b735-c5958636ad95","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"687ee252-a56c-49e3-84a4-23a94a9873c7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=30e8b036-3ed3-43e5-931c-4159ec0e5ea7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9e9814df6731"]}} {"level":"debug","ts":"2026-07-23T12:52:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9275a9ef-a766-4de0-b735-c5958636ad95","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9e9814df6731"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=30e8b036-3ed3-43e5-931c-4159ec0e5ea7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"687ee252-a56c-49e3-84a4-23a94a9873c7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-474ecb.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T12:52:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9275a9ef-a766-4de0-b735-c5958636ad95","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:52:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9275a9ef-a766-4de0-b735-c5958636ad95","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:52:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9275a9ef-a766-4de0-b735-c5958636ad95","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-474ecb/auth-test-model-474ecb\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-474ecb/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:52:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9275a9ef-a766-4de0-b735-c5958636ad95","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T12:52:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9275a9ef-a766-4de0-b735-c5958636ad95","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T12:52:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9275a9ef-a766-4de0-b735-c5958636ad95","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T12:52:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9275a9ef-a766-4de0-b735-c5958636ad95","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T12:52:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9275a9ef-a766-4de0-b735-c5958636ad95","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T12:52:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c7307f69-0594-4ac2-93b0-0e25cfc72c2a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:51654","PortSpecifier":{"PortValue":51654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c7307f69-0594-4ac2-93b0-0e25cfc72c2a","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-474ecb.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T12:52:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c7307f69-0594-4ac2-93b0-0e25cfc72c2a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:51654","PortSpecifier":{"PortValue":51654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784811133,"nanos":596179942},"http":{"id":"c7307f69-0594-4ac2-93b0-0e25cfc72c2a","method":"GET","headers":{":authority":"e2e-shared-b-474ecb.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T12:52:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c7307f69-0594-4ac2-93b0-0e25cfc72c2a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-17g1ANI75QVwNNRI4_rHeXJ7v9UcPmUVj8JuqmGYlTgfn4MvzCNRI1owGq75d"} {"level":"debug","ts":"2026-07-23T12:52:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c7307f69-0594-4ac2-93b0-0e25cfc72c2a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-474ecb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-17g1ANI75QVwNNRI4_rHeXJ7v9UcPmUVj8JuqmGYlTgfn4MvzCNRI1owGq75d\"}"} {"level":"debug","ts":"2026-07-23T12:52:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c7307f69-0594-4ac2-93b0-0e25cfc72c2a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-474ecb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-23T12:52:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c7307f69-0594-4ac2-93b0-0e25cfc72c2a","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-474ecb.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T12:52:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7307f69-0594-4ac2-93b0-0e25cfc72c2a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:52:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"c7307f69-0594-4ac2-93b0-0e25cfc72c2a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-23T12:52:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c7307f69-0594-4ac2-93b0-0e25cfc72c2a","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-23T12:52:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c7307f69-0594-4ac2-93b0-0e25cfc72c2a","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-07-23T12:52:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a"} {"level":"info","ts":"2026-07-23T12:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34"} {"level":"info","ts":"2026-07-23T12:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4e99badf14e58e0a5bf347b28670177a8ae3aac1a214bf919b04892fa5918098"} {"level":"info","ts":"2026-07-23T12:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/452fefd9dfaa3552263fab027aebcb45b9f8e33d6a082f8304c9aa165c0f2783"} {"level":"info","ts":"2026-07-23T12:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294"} {"level":"info","ts":"2026-07-23T12:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ae4b04fcf59b021fe8bd84c75de6a2cc7008f38d826b5789efb24e4fc6cc861f"} {"level":"info","ts":"2026-07-23T12:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd"} {"level":"info","ts":"2026-07-23T12:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a"} {"level":"info","ts":"2026-07-23T12:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2"} {"level":"info","ts":"2026-07-23T12:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a"} {"level":"info","ts":"2026-07-23T12:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91"} {"level":"info","ts":"2026-07-23T12:52:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad"} {"level":"debug","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a"} {"level":"info","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a"} {"level":"info","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a"} {"level":"debug","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a"} {"level":"debug","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a"} {"level":"debug","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a"} {"level":"debug","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a"} {"level":"debug","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a"} {"level":"debug","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a"} {"level":"debug","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a"} {"level":"info","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a"} {"level":"debug","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a"} {"level":"info","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a"} {"level":"debug","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a"} {"level":"info","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34"} {"level":"info","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a"} {"level":"info","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34"} {"level":"info","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a"} {"level":"info","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a"} {"level":"debug","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34"} {"level":"info","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a"} {"level":"debug","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad"} {"level":"debug","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad"} {"level":"debug","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad"} {"level":"info","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a"} {"level":"info","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad"} {"level":"info","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a"} {"level":"info","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad"} {"level":"info","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a"} {"level":"info","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae4b04fcf59b021fe8bd84c75de6a2cc7008f38d826b5789efb24e4fc6cc861f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae4b04fcf59b021fe8bd84c75de6a2cc7008f38d826b5789efb24e4fc6cc861f"} {"level":"info","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae4b04fcf59b021fe8bd84c75de6a2cc7008f38d826b5789efb24e4fc6cc861f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad"} {"level":"info","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae4b04fcf59b021fe8bd84c75de6a2cc7008f38d826b5789efb24e4fc6cc861f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae4b04fcf59b021fe8bd84c75de6a2cc7008f38d826b5789efb24e4fc6cc861f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a"} {"level":"info","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae4b04fcf59b021fe8bd84c75de6a2cc7008f38d826b5789efb24e4fc6cc861f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae4b04fcf59b021fe8bd84c75de6a2cc7008f38d826b5789efb24e4fc6cc861f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae4b04fcf59b021fe8bd84c75de6a2cc7008f38d826b5789efb24e4fc6cc861f"} {"level":"info","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae4b04fcf59b021fe8bd84c75de6a2cc7008f38d826b5789efb24e4fc6cc861f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"452fefd9dfaa3552263fab027aebcb45b9f8e33d6a082f8304c9aa165c0f2783","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"452fefd9dfaa3552263fab027aebcb45b9f8e33d6a082f8304c9aa165c0f2783","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad"} {"level":"info","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae4b04fcf59b021fe8bd84c75de6a2cc7008f38d826b5789efb24e4fc6cc861f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae4b04fcf59b021fe8bd84c75de6a2cc7008f38d826b5789efb24e4fc6cc861f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae4b04fcf59b021fe8bd84c75de6a2cc7008f38d826b5789efb24e4fc6cc861f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"452fefd9dfaa3552263fab027aebcb45b9f8e33d6a082f8304c9aa165c0f2783","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a"} {"level":"info","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae4b04fcf59b021fe8bd84c75de6a2cc7008f38d826b5789efb24e4fc6cc861f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"452fefd9dfaa3552263fab027aebcb45b9f8e33d6a082f8304c9aa165c0f2783","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"452fefd9dfaa3552263fab027aebcb45b9f8e33d6a082f8304c9aa165c0f2783","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e99badf14e58e0a5bf347b28670177a8ae3aac1a214bf919b04892fa5918098","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/452fefd9dfaa3552263fab027aebcb45b9f8e33d6a082f8304c9aa165c0f2783"} {"level":"info","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e99badf14e58e0a5bf347b28670177a8ae3aac1a214bf919b04892fa5918098","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"452fefd9dfaa3552263fab027aebcb45b9f8e33d6a082f8304c9aa165c0f2783","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["452fefd9dfaa3552263fab027aebcb45b9f8e33d6a082f8304c9aa165c0f2783"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"452fefd9dfaa3552263fab027aebcb45b9f8e33d6a082f8304c9aa165c0f2783","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae4b04fcf59b021fe8bd84c75de6a2cc7008f38d826b5789efb24e4fc6cc861f"} {"level":"info","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e99badf14e58e0a5bf347b28670177a8ae3aac1a214bf919b04892fa5918098","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"452fefd9dfaa3552263fab027aebcb45b9f8e33d6a082f8304c9aa165c0f2783","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e99badf14e58e0a5bf347b28670177a8ae3aac1a214bf919b04892fa5918098","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2"} {"level":"debug","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e99badf14e58e0a5bf347b28670177a8ae3aac1a214bf919b04892fa5918098","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad"} {"level":"debug","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e99badf14e58e0a5bf347b28670177a8ae3aac1a214bf919b04892fa5918098"} {"level":"info","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e99badf14e58e0a5bf347b28670177a8ae3aac1a214bf919b04892fa5918098","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e99badf14e58e0a5bf347b28670177a8ae3aac1a214bf919b04892fa5918098"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91"} {"level":"info","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e99badf14e58e0a5bf347b28670177a8ae3aac1a214bf919b04892fa5918098","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e99badf14e58e0a5bf347b28670177a8ae3aac1a214bf919b04892fa5918098","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/452fefd9dfaa3552263fab027aebcb45b9f8e33d6a082f8304c9aa165c0f2783"} {"level":"info","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2"} {"level":"debug","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294"} {"level":"debug","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd"} {"level":"info","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e99badf14e58e0a5bf347b28670177a8ae3aac1a214bf919b04892fa5918098"} {"level":"info","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91"} {"level":"debug","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294"} {"level":"info","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd"} {"level":"debug","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd"} {"level":"debug","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd"} {"level":"debug","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd"} {"level":"debug","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:52:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd"} {"level":"info","ts":"2026-07-23T12:52:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8444919f-d420-4f8c-96b1-6033d9005afc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:34596","PortSpecifier":{"PortValue":34596}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8444919f-d420-4f8c-96b1-6033d9005afc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d45fc5.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T12:52:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8444919f-d420-4f8c-96b1-6033d9005afc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:34596","PortSpecifier":{"PortValue":34596}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784811153,"nanos":5496695},"http":{"id":"8444919f-d420-4f8c-96b1-6033d9005afc","method":"POST","headers":{":authority":"e2e-shared-a-d45fc5.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T12:52:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8444919f-d420-4f8c-96b1-6033d9005afc","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T12:52:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8444919f-d420-4f8c-96b1-6033d9005afc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"687ee252-a56c-49e3-84a4-23a94a9873c7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=30e8b036-3ed3-43e5-931c-4159ec0e5ea7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9e9814df6731"]}} {"level":"debug","ts":"2026-07-23T12:52:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8444919f-d420-4f8c-96b1-6033d9005afc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9e9814df6731"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=30e8b036-3ed3-43e5-931c-4159ec0e5ea7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"687ee252-a56c-49e3-84a4-23a94a9873c7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9ba07fd8b959add16591f284c3e9b9030166090aa09b8a3555860b1c161e1e38"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d45fc5.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T12:52:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8444919f-d420-4f8c-96b1-6033d9005afc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:52:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8444919f-d420-4f8c-96b1-6033d9005afc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:52:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8444919f-d420-4f8c-96b1-6033d9005afc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d45fc5/auth-test-model-d45fc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d45fc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:52:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8444919f-d420-4f8c-96b1-6033d9005afc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T12:52:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8444919f-d420-4f8c-96b1-6033d9005afc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T12:52:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8444919f-d420-4f8c-96b1-6033d9005afc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T12:52:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8444919f-d420-4f8c-96b1-6033d9005afc","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T12:52:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8444919f-d420-4f8c-96b1-6033d9005afc","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T12:52:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57827e86-3d3d-4e8e-938a-c2b0980626aa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:59708","PortSpecifier":{"PortValue":59708}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"57827e86-3d3d-4e8e-938a-c2b0980626aa","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-474ecb.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T12:52:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57827e86-3d3d-4e8e-938a-c2b0980626aa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:59708","PortSpecifier":{"PortValue":59708}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784811153,"nanos":44336676},"http":{"id":"57827e86-3d3d-4e8e-938a-c2b0980626aa","method":"POST","headers":{":authority":"e2e-shared-b-474ecb.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T12:52:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"57827e86-3d3d-4e8e-938a-c2b0980626aa","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T12:52:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"57827e86-3d3d-4e8e-938a-c2b0980626aa","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"687ee252-a56c-49e3-84a4-23a94a9873c7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=30e8b036-3ed3-43e5-931c-4159ec0e5ea7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9e9814df6731"]}} {"level":"debug","ts":"2026-07-23T12:52:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"57827e86-3d3d-4e8e-938a-c2b0980626aa","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9e9814df6731"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=30e8b036-3ed3-43e5-931c-4159ec0e5ea7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"687ee252-a56c-49e3-84a4-23a94a9873c7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-474ecb.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T12:52:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57827e86-3d3d-4e8e-938a-c2b0980626aa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:52:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57827e86-3d3d-4e8e-938a-c2b0980626aa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:52:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57827e86-3d3d-4e8e-938a-c2b0980626aa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-474ecb/auth-test-model-474ecb\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-474ecb/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:52:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"57827e86-3d3d-4e8e-938a-c2b0980626aa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T12:52:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57827e86-3d3d-4e8e-938a-c2b0980626aa","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T12:52:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57827e86-3d3d-4e8e-938a-c2b0980626aa","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T12:52:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57827e86-3d3d-4e8e-938a-c2b0980626aa","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T12:52:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57827e86-3d3d-4e8e-938a-c2b0980626aa","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T12:52:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4cf736bb-9375-4033-8d0d-6b4114f86526","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:34600","PortSpecifier":{"PortValue":34600}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4cf736bb-9375-4033-8d0d-6b4114f86526","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-d45fc5.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T12:52:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4cf736bb-9375-4033-8d0d-6b4114f86526","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:34600","PortSpecifier":{"PortValue":34600}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784811153,"nanos":92993151},"http":{"id":"4cf736bb-9375-4033-8d0d-6b4114f86526","method":"POST","headers":{":authority":"e2e-shared-a-d45fc5.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T12:52:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4cf736bb-9375-4033-8d0d-6b4114f86526","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T12:52:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4cf736bb-9375-4033-8d0d-6b4114f86526","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"687ee252-a56c-49e3-84a4-23a94a9873c7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=30e8b036-3ed3-43e5-931c-4159ec0e5ea7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9e9814df6731"]}} {"level":"debug","ts":"2026-07-23T12:52:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4cf736bb-9375-4033-8d0d-6b4114f86526","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9e9814df6731"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=30e8b036-3ed3-43e5-931c-4159ec0e5ea7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"687ee252-a56c-49e3-84a4-23a94a9873c7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9ba07fd8b959add16591f284c3e9b9030166090aa09b8a3555860b1c161e1e38"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d45fc5.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T12:52:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4cf736bb-9375-4033-8d0d-6b4114f86526","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:52:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4cf736bb-9375-4033-8d0d-6b4114f86526","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:52:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4cf736bb-9375-4033-8d0d-6b4114f86526","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d45fc5/auth-test-model-d45fc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d45fc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:52:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4cf736bb-9375-4033-8d0d-6b4114f86526","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T12:52:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4cf736bb-9375-4033-8d0d-6b4114f86526","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T12:52:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4cf736bb-9375-4033-8d0d-6b4114f86526","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T12:52:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4cf736bb-9375-4033-8d0d-6b4114f86526","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T12:52:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4cf736bb-9375-4033-8d0d-6b4114f86526","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T12:52:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d7118220-5eaf-4e70-9819-eaa039f89903","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:59714","PortSpecifier":{"PortValue":59714}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d7118220-5eaf-4e70-9819-eaa039f89903","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-474ecb.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T12:52:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d7118220-5eaf-4e70-9819-eaa039f89903","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:59714","PortSpecifier":{"PortValue":59714}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784811153,"nanos":138338576},"http":{"id":"d7118220-5eaf-4e70-9819-eaa039f89903","method":"POST","headers":{":authority":"e2e-shared-b-474ecb.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T12:52:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d7118220-5eaf-4e70-9819-eaa039f89903","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T12:52:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d7118220-5eaf-4e70-9819-eaa039f89903","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"687ee252-a56c-49e3-84a4-23a94a9873c7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=30e8b036-3ed3-43e5-931c-4159ec0e5ea7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9e9814df6731"]}} {"level":"debug","ts":"2026-07-23T12:52:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d7118220-5eaf-4e70-9819-eaa039f89903","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9e9814df6731"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=30e8b036-3ed3-43e5-931c-4159ec0e5ea7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"687ee252-a56c-49e3-84a4-23a94a9873c7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-474ecb.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T12:52:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d7118220-5eaf-4e70-9819-eaa039f89903","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:52:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d7118220-5eaf-4e70-9819-eaa039f89903","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:52:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d7118220-5eaf-4e70-9819-eaa039f89903","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-474ecb/auth-test-model-474ecb\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-474ecb/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:52:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d7118220-5eaf-4e70-9819-eaa039f89903","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T12:52:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d7118220-5eaf-4e70-9819-eaa039f89903","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T12:52:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d7118220-5eaf-4e70-9819-eaa039f89903","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T12:52:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d7118220-5eaf-4e70-9819-eaa039f89903","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T12:52:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d7118220-5eaf-4e70-9819-eaa039f89903","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T12:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a"} {"level":"info","ts":"2026-07-23T12:52:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294"} {"level":"info","ts":"2026-07-23T12:52:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34"} {"level":"info","ts":"2026-07-23T12:52:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd"} {"level":"info","ts":"2026-07-23T12:52:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a"} {"level":"info","ts":"2026-07-23T12:52:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4e99badf14e58e0a5bf347b28670177a8ae3aac1a214bf919b04892fa5918098"} {"level":"info","ts":"2026-07-23T12:52:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2"} {"level":"info","ts":"2026-07-23T12:52:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ae4b04fcf59b021fe8bd84c75de6a2cc7008f38d826b5789efb24e4fc6cc861f"} {"level":"info","ts":"2026-07-23T12:52:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/452fefd9dfaa3552263fab027aebcb45b9f8e33d6a082f8304c9aa165c0f2783"} {"level":"info","ts":"2026-07-23T12:52:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91"} {"level":"info","ts":"2026-07-23T12:52:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad"} {"level":"info","ts":"2026-07-23T12:52:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a"} {"level":"debug","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34"} {"level":"debug","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34"} {"level":"debug","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34"} {"level":"debug","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34"} {"level":"debug","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34"} {"level":"debug","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34"} {"level":"debug","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34"} {"level":"info","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad"} {"level":"info","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34"} {"level":"info","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad"} {"level":"info","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34"} {"level":"error","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad"} {"level":"info","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad"} {"level":"debug","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34"} {"level":"info","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad"} {"level":"info","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad"} {"level":"info","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a"} {"level":"info","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad"} {"level":"info","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a"} {"level":"info","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a"} {"level":"info","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e99badf14e58e0a5bf347b28670177a8ae3aac1a214bf919b04892fa5918098","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e99badf14e58e0a5bf347b28670177a8ae3aac1a214bf919b04892fa5918098","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e99badf14e58e0a5bf347b28670177a8ae3aac1a214bf919b04892fa5918098","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a"} {"level":"debug","ts":"2026-07-23T12:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e99badf14e58e0a5bf347b28670177a8ae3aac1a214bf919b04892fa5918098","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e99badf14e58e0a5bf347b28670177a8ae3aac1a214bf919b04892fa5918098","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e99badf14e58e0a5bf347b28670177a8ae3aac1a214bf919b04892fa5918098","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e99badf14e58e0a5bf347b28670177a8ae3aac1a214bf919b04892fa5918098","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e99badf14e58e0a5bf347b28670177a8ae3aac1a214bf919b04892fa5918098"} {"level":"info","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad"} {"level":"info","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a"} {"level":"debug","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e99badf14e58e0a5bf347b28670177a8ae3aac1a214bf919b04892fa5918098","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e99badf14e58e0a5bf347b28670177a8ae3aac1a214bf919b04892fa5918098"} {"level":"debug","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e99badf14e58e0a5bf347b28670177a8ae3aac1a214bf919b04892fa5918098","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e99badf14e58e0a5bf347b28670177a8ae3aac1a214bf919b04892fa5918098"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a"} {"level":"info","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e99badf14e58e0a5bf347b28670177a8ae3aac1a214bf919b04892fa5918098","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e99badf14e58e0a5bf347b28670177a8ae3aac1a214bf919b04892fa5918098","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a"} {"level":"debug","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e99badf14e58e0a5bf347b28670177a8ae3aac1a214bf919b04892fa5918098"} {"level":"info","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a"} {"level":"debug","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a"} {"level":"debug","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a"} {"level":"debug","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a"} {"level":"debug","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd"} {"level":"debug","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd"} {"level":"info","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a"} {"level":"info","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd"} {"level":"info","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a"} {"level":"info","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd"} {"level":"info","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd"} {"level":"info","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a"} {"level":"info","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"452fefd9dfaa3552263fab027aebcb45b9f8e33d6a082f8304c9aa165c0f2783","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91"} {"level":"info","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"452fefd9dfaa3552263fab027aebcb45b9f8e33d6a082f8304c9aa165c0f2783","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/452fefd9dfaa3552263fab027aebcb45b9f8e33d6a082f8304c9aa165c0f2783"} {"level":"info","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"452fefd9dfaa3552263fab027aebcb45b9f8e33d6a082f8304c9aa165c0f2783","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["452fefd9dfaa3552263fab027aebcb45b9f8e33d6a082f8304c9aa165c0f2783"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91"} {"level":"info","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"452fefd9dfaa3552263fab027aebcb45b9f8e33d6a082f8304c9aa165c0f2783","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae4b04fcf59b021fe8bd84c75de6a2cc7008f38d826b5789efb24e4fc6cc861f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/452fefd9dfaa3552263fab027aebcb45b9f8e33d6a082f8304c9aa165c0f2783"} {"level":"info","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae4b04fcf59b021fe8bd84c75de6a2cc7008f38d826b5789efb24e4fc6cc861f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"452fefd9dfaa3552263fab027aebcb45b9f8e33d6a082f8304c9aa165c0f2783","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae4b04fcf59b021fe8bd84c75de6a2cc7008f38d826b5789efb24e4fc6cc861f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae4b04fcf59b021fe8bd84c75de6a2cc7008f38d826b5789efb24e4fc6cc861f"} {"level":"info","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae4b04fcf59b021fe8bd84c75de6a2cc7008f38d826b5789efb24e4fc6cc861f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae4b04fcf59b021fe8bd84c75de6a2cc7008f38d826b5789efb24e4fc6cc861f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae4b04fcf59b021fe8bd84c75de6a2cc7008f38d826b5789efb24e4fc6cc861f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ae4b04fcf59b021fe8bd84c75de6a2cc7008f38d826b5789efb24e4fc6cc861f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ae4b04fcf59b021fe8bd84c75de6a2cc7008f38d826b5789efb24e4fc6cc861f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae4b04fcf59b021fe8bd84c75de6a2cc7008f38d826b5789efb24e4fc6cc861f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae4b04fcf59b021fe8bd84c75de6a2cc7008f38d826b5789efb24e4fc6cc861f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91"} {"level":"info","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae4b04fcf59b021fe8bd84c75de6a2cc7008f38d826b5789efb24e4fc6cc861f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae4b04fcf59b021fe8bd84c75de6a2cc7008f38d826b5789efb24e4fc6cc861f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/452fefd9dfaa3552263fab027aebcb45b9f8e33d6a082f8304c9aa165c0f2783"} {"level":"info","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae4b04fcf59b021fe8bd84c75de6a2cc7008f38d826b5789efb24e4fc6cc861f"} {"level":"info","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a"} {"level":"info","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2"} {"level":"info","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2"} {"level":"debug","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a"} {"level":"info","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2"} {"level":"info","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294"} {"level":"info","ts":"2026-07-23T12:52:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2"} {"level":"info","ts":"2026-07-23T12:52:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294"} {"level":"info","ts":"2026-07-23T12:52:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294"} {"level":"info","ts":"2026-07-23T12:52:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2"} {"level":"info","ts":"2026-07-23T12:52:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294"} {"level":"info","ts":"2026-07-23T12:52:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2"} {"level":"info","ts":"2026-07-23T12:52:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:52:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:52:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:52:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2"} {"level":"debug","ts":"2026-07-23T12:52:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:52:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:52:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:52:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:52:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:52:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294"} {"level":"info","ts":"2026-07-23T12:52:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2"} {"level":"info","ts":"2026-07-23T12:52:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3aa08ef3-47f2-4a0a-9a66-68ae454a29ef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:42716","PortSpecifier":{"PortValue":42716}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3aa08ef3-47f2-4a0a-9a66-68ae454a29ef","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d45fc5.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T12:52:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3aa08ef3-47f2-4a0a-9a66-68ae454a29ef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:42716","PortSpecifier":{"PortValue":42716}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784811170,"nanos":477473193},"http":{"id":"3aa08ef3-47f2-4a0a-9a66-68ae454a29ef","method":"POST","headers":{":authority":"e2e-shared-a-d45fc5.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T12:52:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3aa08ef3-47f2-4a0a-9a66-68ae454a29ef","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T12:52:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3aa08ef3-47f2-4a0a-9a66-68ae454a29ef","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"687ee252-a56c-49e3-84a4-23a94a9873c7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=30e8b036-3ed3-43e5-931c-4159ec0e5ea7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9e9814df6731"]}} {"level":"debug","ts":"2026-07-23T12:52:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3aa08ef3-47f2-4a0a-9a66-68ae454a29ef","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9e9814df6731"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=30e8b036-3ed3-43e5-931c-4159ec0e5ea7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"687ee252-a56c-49e3-84a4-23a94a9873c7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9ba07fd8b959add16591f284c3e9b9030166090aa09b8a3555860b1c161e1e38"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d45fc5.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T12:52:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3aa08ef3-47f2-4a0a-9a66-68ae454a29ef","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:52:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3aa08ef3-47f2-4a0a-9a66-68ae454a29ef","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:52:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3aa08ef3-47f2-4a0a-9a66-68ae454a29ef","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d45fc5/auth-test-model-d45fc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d45fc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:52:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3aa08ef3-47f2-4a0a-9a66-68ae454a29ef","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T12:52:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3aa08ef3-47f2-4a0a-9a66-68ae454a29ef","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T12:52:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3aa08ef3-47f2-4a0a-9a66-68ae454a29ef","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T12:52:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3aa08ef3-47f2-4a0a-9a66-68ae454a29ef","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T12:52:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3aa08ef3-47f2-4a0a-9a66-68ae454a29ef","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T12:52:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"05e6c65c-6e5a-4575-88e6-b2ee6a04def6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:60624","PortSpecifier":{"PortValue":60624}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"05e6c65c-6e5a-4575-88e6-b2ee6a04def6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-474ecb.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T12:52:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"05e6c65c-6e5a-4575-88e6-b2ee6a04def6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:60624","PortSpecifier":{"PortValue":60624}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784811170,"nanos":512730191},"http":{"id":"05e6c65c-6e5a-4575-88e6-b2ee6a04def6","method":"POST","headers":{":authority":"e2e-shared-b-474ecb.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T12:52:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"05e6c65c-6e5a-4575-88e6-b2ee6a04def6","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T12:52:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"05e6c65c-6e5a-4575-88e6-b2ee6a04def6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"687ee252-a56c-49e3-84a4-23a94a9873c7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=30e8b036-3ed3-43e5-931c-4159ec0e5ea7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9e9814df6731"]}} {"level":"debug","ts":"2026-07-23T12:52:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"05e6c65c-6e5a-4575-88e6-b2ee6a04def6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9e9814df6731"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=30e8b036-3ed3-43e5-931c-4159ec0e5ea7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"687ee252-a56c-49e3-84a4-23a94a9873c7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-474ecb.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T12:52:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05e6c65c-6e5a-4575-88e6-b2ee6a04def6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:52:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05e6c65c-6e5a-4575-88e6-b2ee6a04def6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:52:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05e6c65c-6e5a-4575-88e6-b2ee6a04def6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-474ecb/auth-test-model-474ecb\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-474ecb/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:52:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"05e6c65c-6e5a-4575-88e6-b2ee6a04def6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T12:52:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05e6c65c-6e5a-4575-88e6-b2ee6a04def6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T12:52:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05e6c65c-6e5a-4575-88e6-b2ee6a04def6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T12:52:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"05e6c65c-6e5a-4575-88e6-b2ee6a04def6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T12:52:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"05e6c65c-6e5a-4575-88e6-b2ee6a04def6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T12:52:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"700c2963-5f6f-48e3-811f-21676e61790e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:60626","PortSpecifier":{"PortValue":60626}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"700c2963-5f6f-48e3-811f-21676e61790e","method":"GET","path":"/maas-api/v1/api-keys/d4a709aa-485a-4267-aec3-beef6d444339","host":"e2e-shared-b-474ecb.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T12:52:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"700c2963-5f6f-48e3-811f-21676e61790e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:60626","PortSpecifier":{"PortValue":60626}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784811170,"nanos":550955313},"http":{"id":"700c2963-5f6f-48e3-811f-21676e61790e","method":"GET","headers":{":authority":"e2e-shared-b-474ecb.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/d4a709aa-485a-4267-aec3-beef6d444339",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T12:52:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"700c2963-5f6f-48e3-811f-21676e61790e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T12:52:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"700c2963-5f6f-48e3-811f-21676e61790e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"687ee252-a56c-49e3-84a4-23a94a9873c7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=30e8b036-3ed3-43e5-931c-4159ec0e5ea7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9e9814df6731"]}} {"level":"debug","ts":"2026-07-23T12:52:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"700c2963-5f6f-48e3-811f-21676e61790e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9e9814df6731"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=30e8b036-3ed3-43e5-931c-4159ec0e5ea7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"687ee252-a56c-49e3-84a4-23a94a9873c7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-474ecb.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/d4a709aa-485a-4267-aec3-beef6d444339",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T12:52:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"700c2963-5f6f-48e3-811f-21676e61790e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:52:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"700c2963-5f6f-48e3-811f-21676e61790e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:52:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"700c2963-5f6f-48e3-811f-21676e61790e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-474ecb/auth-test-model-474ecb\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-474ecb/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:52:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"700c2963-5f6f-48e3-811f-21676e61790e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T12:52:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"700c2963-5f6f-48e3-811f-21676e61790e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T12:52:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"700c2963-5f6f-48e3-811f-21676e61790e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T12:52:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"700c2963-5f6f-48e3-811f-21676e61790e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T12:52:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"700c2963-5f6f-48e3-811f-21676e61790e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T12:52:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4c8bfbab-3bb8-46f2-bae1-9ca148edc28e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:42720","PortSpecifier":{"PortValue":42720}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4c8bfbab-3bb8-46f2-bae1-9ca148edc28e","method":"GET","path":"/maas-api/v1/api-keys/d4a709aa-485a-4267-aec3-beef6d444339","host":"e2e-shared-a-d45fc5.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T12:52:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4c8bfbab-3bb8-46f2-bae1-9ca148edc28e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:42720","PortSpecifier":{"PortValue":42720}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784811170,"nanos":584424059},"http":{"id":"4c8bfbab-3bb8-46f2-bae1-9ca148edc28e","method":"GET","headers":{":authority":"e2e-shared-a-d45fc5.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/d4a709aa-485a-4267-aec3-beef6d444339",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T12:52:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4c8bfbab-3bb8-46f2-bae1-9ca148edc28e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T12:52:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4c8bfbab-3bb8-46f2-bae1-9ca148edc28e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"687ee252-a56c-49e3-84a4-23a94a9873c7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=30e8b036-3ed3-43e5-931c-4159ec0e5ea7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9e9814df6731"]}} {"level":"debug","ts":"2026-07-23T12:52:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4c8bfbab-3bb8-46f2-bae1-9ca148edc28e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9e9814df6731"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=30e8b036-3ed3-43e5-931c-4159ec0e5ea7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"687ee252-a56c-49e3-84a4-23a94a9873c7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9ba07fd8b959add16591f284c3e9b9030166090aa09b8a3555860b1c161e1e38"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d45fc5.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/d4a709aa-485a-4267-aec3-beef6d444339",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T12:52:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c8bfbab-3bb8-46f2-bae1-9ca148edc28e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:52:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c8bfbab-3bb8-46f2-bae1-9ca148edc28e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:52:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c8bfbab-3bb8-46f2-bae1-9ca148edc28e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d45fc5/auth-test-model-d45fc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d45fc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:52:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4c8bfbab-3bb8-46f2-bae1-9ca148edc28e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T12:52:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c8bfbab-3bb8-46f2-bae1-9ca148edc28e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T12:52:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c8bfbab-3bb8-46f2-bae1-9ca148edc28e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T12:52:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4c8bfbab-3bb8-46f2-bae1-9ca148edc28e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T12:52:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4c8bfbab-3bb8-46f2-bae1-9ca148edc28e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T12:52:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294"} {"level":"info","ts":"2026-07-23T12:52:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91"} {"level":"info","ts":"2026-07-23T12:52:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ae4b04fcf59b021fe8bd84c75de6a2cc7008f38d826b5789efb24e4fc6cc861f"} {"level":"info","ts":"2026-07-23T12:52:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34"} {"level":"info","ts":"2026-07-23T12:52:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2"} {"level":"info","ts":"2026-07-23T12:52:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a"} {"level":"info","ts":"2026-07-23T12:52:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4e99badf14e58e0a5bf347b28670177a8ae3aac1a214bf919b04892fa5918098"} {"level":"info","ts":"2026-07-23T12:52:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad"} {"level":"info","ts":"2026-07-23T12:52:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a"} {"level":"info","ts":"2026-07-23T12:52:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd"} {"level":"info","ts":"2026-07-23T12:52:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/452fefd9dfaa3552263fab027aebcb45b9f8e33d6a082f8304c9aa165c0f2783"} {"level":"info","ts":"2026-07-23T12:52:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a"} {"level":"debug","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:53:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:53:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad"} {"level":"debug","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad"} {"level":"debug","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:53:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:53:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:53:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:53:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad"} {"level":"debug","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad"} {"level":"debug","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:53:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:53:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:53:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:53:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd"} {"level":"debug","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:53:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:53:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad"} {"level":"info","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:53:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:53:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd"} {"level":"info","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd"} {"level":"debug","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd"} {"level":"debug","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:53:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:53:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd"} {"level":"debug","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e99badf14e58e0a5bf347b28670177a8ae3aac1a214bf919b04892fa5918098","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:53:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:53:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e99badf14e58e0a5bf347b28670177a8ae3aac1a214bf919b04892fa5918098","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e99badf14e58e0a5bf347b28670177a8ae3aac1a214bf919b04892fa5918098","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:53:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:53:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e99badf14e58e0a5bf347b28670177a8ae3aac1a214bf919b04892fa5918098"} {"level":"info","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e99badf14e58e0a5bf347b28670177a8ae3aac1a214bf919b04892fa5918098","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e99badf14e58e0a5bf347b28670177a8ae3aac1a214bf919b04892fa5918098","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:53:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:53:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4e99badf14e58e0a5bf347b28670177a8ae3aac1a214bf919b04892fa5918098","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4e99badf14e58e0a5bf347b28670177a8ae3aac1a214bf919b04892fa5918098\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e99badf14e58e0a5bf347b28670177a8ae3aac1a214bf919b04892fa5918098","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e99badf14e58e0a5bf347b28670177a8ae3aac1a214bf919b04892fa5918098","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e99badf14e58e0a5bf347b28670177a8ae3aac1a214bf919b04892fa5918098"} {"level":"info","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e99badf14e58e0a5bf347b28670177a8ae3aac1a214bf919b04892fa5918098"} {"level":"debug","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:53:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:53:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a"} {"level":"debug","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e99badf14e58e0a5bf347b28670177a8ae3aac1a214bf919b04892fa5918098","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:53:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:53:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e99badf14e58e0a5bf347b28670177a8ae3aac1a214bf919b04892fa5918098"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e99badf14e58e0a5bf347b28670177a8ae3aac1a214bf919b04892fa5918098","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e99badf14e58e0a5bf347b28670177a8ae3aac1a214bf919b04892fa5918098","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a"} {"level":"info","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e99badf14e58e0a5bf347b28670177a8ae3aac1a214bf919b04892fa5918098"} {"level":"debug","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:53:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:53:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:53:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:53:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:53:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:53:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a"} {"level":"info","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:53:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:53:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294"} {"level":"info","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:53:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:53:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:53:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:53:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a"} {"level":"info","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:53:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:53:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:53:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:53:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294"} {"level":"info","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:53:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:53:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a"} {"level":"info","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"452fefd9dfaa3552263fab027aebcb45b9f8e33d6a082f8304c9aa165c0f2783","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:53:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:53:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294"} {"level":"info","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"452fefd9dfaa3552263fab027aebcb45b9f8e33d6a082f8304c9aa165c0f2783","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"452fefd9dfaa3552263fab027aebcb45b9f8e33d6a082f8304c9aa165c0f2783","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:53:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:53:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"452fefd9dfaa3552263fab027aebcb45b9f8e33d6a082f8304c9aa165c0f2783","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"452fefd9dfaa3552263fab027aebcb45b9f8e33d6a082f8304c9aa165c0f2783","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:53:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:53:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/452fefd9dfaa3552263fab027aebcb45b9f8e33d6a082f8304c9aa165c0f2783"} {"level":"error","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"452fefd9dfaa3552263fab027aebcb45b9f8e33d6a082f8304c9aa165c0f2783","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"452fefd9dfaa3552263fab027aebcb45b9f8e33d6a082f8304c9aa165c0f2783\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"452fefd9dfaa3552263fab027aebcb45b9f8e33d6a082f8304c9aa165c0f2783","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:53:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:53:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["452fefd9dfaa3552263fab027aebcb45b9f8e33d6a082f8304c9aa165c0f2783"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"452fefd9dfaa3552263fab027aebcb45b9f8e33d6a082f8304c9aa165c0f2783","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"452fefd9dfaa3552263fab027aebcb45b9f8e33d6a082f8304c9aa165c0f2783","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:53:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:53:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["452fefd9dfaa3552263fab027aebcb45b9f8e33d6a082f8304c9aa165c0f2783"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a"} {"level":"error","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"452fefd9dfaa3552263fab027aebcb45b9f8e33d6a082f8304c9aa165c0f2783","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"452fefd9dfaa3552263fab027aebcb45b9f8e33d6a082f8304c9aa165c0f2783\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"452fefd9dfaa3552263fab027aebcb45b9f8e33d6a082f8304c9aa165c0f2783","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"452fefd9dfaa3552263fab027aebcb45b9f8e33d6a082f8304c9aa165c0f2783","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294"} {"level":"debug","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:53:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:53:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/452fefd9dfaa3552263fab027aebcb45b9f8e33d6a082f8304c9aa165c0f2783"} {"level":"debug","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:53:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:53:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:53:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:53:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a"} {"level":"error","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a"} {"level":"debug","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae4b04fcf59b021fe8bd84c75de6a2cc7008f38d826b5789efb24e4fc6cc861f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:53:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:53:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae4b04fcf59b021fe8bd84c75de6a2cc7008f38d826b5789efb24e4fc6cc861f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae4b04fcf59b021fe8bd84c75de6a2cc7008f38d826b5789efb24e4fc6cc861f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:53:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:53:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae4b04fcf59b021fe8bd84c75de6a2cc7008f38d826b5789efb24e4fc6cc861f"} {"level":"info","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae4b04fcf59b021fe8bd84c75de6a2cc7008f38d826b5789efb24e4fc6cc861f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:53:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae4b04fcf59b021fe8bd84c75de6a2cc7008f38d826b5789efb24e4fc6cc861f"} {"level":"debug","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae4b04fcf59b021fe8bd84c75de6a2cc7008f38d826b5789efb24e4fc6cc861f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:53:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:53:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae4b04fcf59b021fe8bd84c75de6a2cc7008f38d826b5789efb24e4fc6cc861f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a"} {"level":"info","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae4b04fcf59b021fe8bd84c75de6a2cc7008f38d826b5789efb24e4fc6cc861f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae4b04fcf59b021fe8bd84c75de6a2cc7008f38d826b5789efb24e4fc6cc861f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae4b04fcf59b021fe8bd84c75de6a2cc7008f38d826b5789efb24e4fc6cc861f"} {"level":"debug","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:53:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:53:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:53:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:53:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2"} {"level":"info","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:53:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:53:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2"} {"level":"info","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2"} {"level":"debug","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:53:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:53:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:53:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:53:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91"} {"level":"info","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:53:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:53:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91"} {"level":"debug","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:53:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:53:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2"} {"level":"info","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:53:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:53:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91"} {"level":"debug","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91"} {"level":"debug","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:53:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:53:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:53:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:53:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:53:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:53:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:53:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:53:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91"} {"level":"info","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:53:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:53:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:53:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:53:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34"} {"level":"debug","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:53:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:53:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a"} {"level":"info","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:53:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:53:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:53:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:53:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91"} {"level":"info","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:53:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:53:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34"} {"level":"info","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:53:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:53:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:53:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:53:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a"} {"level":"info","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:53:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:53:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34"} {"level":"info","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:53:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:53:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a"} {"level":"debug","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:53:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:53:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34"} {"level":"info","ts":"2026-07-23T12:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a"} {"level":"info","ts":"2026-07-23T12:53:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6bfa81dc-54f8-4853-8d49-ba511e8a7372","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:48132","PortSpecifier":{"PortValue":48132}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6bfa81dc-54f8-4853-8d49-ba511e8a7372","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d45fc5.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T12:53:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6bfa81dc-54f8-4853-8d49-ba511e8a7372","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:48132","PortSpecifier":{"PortValue":48132}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784811187,"nanos":887339086},"http":{"id":"6bfa81dc-54f8-4853-8d49-ba511e8a7372","method":"POST","headers":{":authority":"e2e-shared-a-d45fc5.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T12:53:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6bfa81dc-54f8-4853-8d49-ba511e8a7372","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T12:53:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6bfa81dc-54f8-4853-8d49-ba511e8a7372","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"687ee252-a56c-49e3-84a4-23a94a9873c7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=30e8b036-3ed3-43e5-931c-4159ec0e5ea7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9e9814df6731"]}} {"level":"debug","ts":"2026-07-23T12:53:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6bfa81dc-54f8-4853-8d49-ba511e8a7372","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9e9814df6731"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=30e8b036-3ed3-43e5-931c-4159ec0e5ea7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"687ee252-a56c-49e3-84a4-23a94a9873c7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9ba07fd8b959add16591f284c3e9b9030166090aa09b8a3555860b1c161e1e38"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d45fc5.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T12:53:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6bfa81dc-54f8-4853-8d49-ba511e8a7372","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:53:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6bfa81dc-54f8-4853-8d49-ba511e8a7372","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:53:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6bfa81dc-54f8-4853-8d49-ba511e8a7372","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d45fc5/auth-test-model-d45fc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d45fc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:53:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6bfa81dc-54f8-4853-8d49-ba511e8a7372","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T12:53:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6bfa81dc-54f8-4853-8d49-ba511e8a7372","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T12:53:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6bfa81dc-54f8-4853-8d49-ba511e8a7372","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-23T12:53:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6bfa81dc-54f8-4853-8d49-ba511e8a7372","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T12:53:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6bfa81dc-54f8-4853-8d49-ba511e8a7372","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T12:53:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c2fb2a29-2765-46d3-a373-bdcef73be28d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:36066","PortSpecifier":{"PortValue":36066}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c2fb2a29-2765-46d3-a373-bdcef73be28d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-474ecb.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T12:53:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c2fb2a29-2765-46d3-a373-bdcef73be28d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:36066","PortSpecifier":{"PortValue":36066}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784811187,"nanos":931439460},"http":{"id":"c2fb2a29-2765-46d3-a373-bdcef73be28d","method":"POST","headers":{":authority":"e2e-shared-b-474ecb.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T12:53:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c2fb2a29-2765-46d3-a373-bdcef73be28d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T12:53:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c2fb2a29-2765-46d3-a373-bdcef73be28d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"687ee252-a56c-49e3-84a4-23a94a9873c7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=30e8b036-3ed3-43e5-931c-4159ec0e5ea7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9e9814df6731"]}} {"level":"debug","ts":"2026-07-23T12:53:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c2fb2a29-2765-46d3-a373-bdcef73be28d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9e9814df6731"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=30e8b036-3ed3-43e5-931c-4159ec0e5ea7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"687ee252-a56c-49e3-84a4-23a94a9873c7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-474ecb.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T12:53:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2fb2a29-2765-46d3-a373-bdcef73be28d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:53:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2fb2a29-2765-46d3-a373-bdcef73be28d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:53:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2fb2a29-2765-46d3-a373-bdcef73be28d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-474ecb/auth-test-model-474ecb\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-474ecb/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:53:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c2fb2a29-2765-46d3-a373-bdcef73be28d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T12:53:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2fb2a29-2765-46d3-a373-bdcef73be28d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T12:53:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2fb2a29-2765-46d3-a373-bdcef73be28d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-23T12:53:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c2fb2a29-2765-46d3-a373-bdcef73be28d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T12:53:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c2fb2a29-2765-46d3-a373-bdcef73be28d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T12:53:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5c12cd6c-c246-4965-997b-3f29a0aa7bae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:48138","PortSpecifier":{"PortValue":48138}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5c12cd6c-c246-4965-997b-3f29a0aa7bae","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-d45fc5.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T12:53:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5c12cd6c-c246-4965-997b-3f29a0aa7bae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:48138","PortSpecifier":{"PortValue":48138}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784811187,"nanos":968756939},"http":{"id":"5c12cd6c-c246-4965-997b-3f29a0aa7bae","method":"POST","headers":{":authority":"e2e-shared-a-d45fc5.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T12:53:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5c12cd6c-c246-4965-997b-3f29a0aa7bae","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Z71NaWE2fpYMg6Xj_lymgEaaNUjgB8ZbrXzz9QusACl2cDtTXJIV8tLCbLz7"} {"level":"debug","ts":"2026-07-23T12:53:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5c12cd6c-c246-4965-997b-3f29a0aa7bae","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d45fc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Z71NaWE2fpYMg6Xj_lymgEaaNUjgB8ZbrXzz9QusACl2cDtTXJIV8tLCbLz7\"}"} {"level":"debug","ts":"2026-07-23T12:53:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5c12cd6c-c246-4965-997b-3f29a0aa7bae","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d45fc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7dd8796c-bfce-4f72-9434-89f2f507ff52","keyName":"e2e-auth-iso-a-6f6bb8","subscription":"e2e-auth-iso-fad105","tenant":"e2e-shared-a-d45fc5","userId":"7dd8796c-bfce-4f72-9434-89f2f507ff52","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T12:53:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5c12cd6c-c246-4965-997b-3f29a0aa7bae","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T12:53:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c12cd6c-c246-4965-997b-3f29a0aa7bae","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:53:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c12cd6c-c246-4965-997b-3f29a0aa7bae","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:53:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c12cd6c-c246-4965-997b-3f29a0aa7bae","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d45fc5/auth-test-model-d45fc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d45fc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:53:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5c12cd6c-c246-4965-997b-3f29a0aa7bae","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-23T12:53:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c12cd6c-c246-4965-997b-3f29a0aa7bae","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T12:53:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c12cd6c-c246-4965-997b-3f29a0aa7bae","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T12:53:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c12cd6c-c246-4965-997b-3f29a0aa7bae","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-fad105"} {"level":"info","ts":"2026-07-23T12:53:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5c12cd6c-c246-4965-997b-3f29a0aa7bae","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T12:53:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5c12cd6c-c246-4965-997b-3f29a0aa7bae","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T12:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6930b08da9433849a26a8ce5f3fa355d566235cff648a7ccb2d6c1163d5c3c34"} {"level":"info","ts":"2026-07-23T12:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a"} {"level":"info","ts":"2026-07-23T12:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9ba07fd8b959add16591f284c3e9b9030166090aa09b8a3555860b1c161e1e38"} {"level":"info","ts":"2026-07-23T12:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/09ffa898c10ce3d1bd77b2648e10dfb5f2f58156478781efdbfd83075d7e94a1"} {"level":"info","ts":"2026-07-23T12:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4e99badf14e58e0a5bf347b28670177a8ae3aac1a214bf919b04892fa5918098"} {"level":"info","ts":"2026-07-23T12:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7ae977ff91c42815af6b0c0aa31a56c65d25f132421f1bf42252d3391f67d2d2"} {"level":"info","ts":"2026-07-23T12:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0328ee93ca2c32ff035e639dd527dfdaed9ec0c7962f67c8213bb89fe74175d7"} {"level":"info","ts":"2026-07-23T12:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/722cce07722ade81119764e03241fe830de4838b2c32a33ad793765102d5430d"} {"level":"info","ts":"2026-07-23T12:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294"} {"level":"info","ts":"2026-07-23T12:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c5e425700bf49ab12bce3272e8140ec8fe63112ef63603e3fa14687c40f0904a"} {"level":"info","ts":"2026-07-23T12:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1b329921ef8795e4624b7b833ce02752b84a9b91218dbfe96f13a099d1ebf880"} {"level":"info","ts":"2026-07-23T12:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/452fefd9dfaa3552263fab027aebcb45b9f8e33d6a082f8304c9aa165c0f2783"} {"level":"info","ts":"2026-07-23T12:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b97ddcf8c3a1ac9b75e4fc9d655ad9a1910bcb19552377f1a77c096edf56dc8a"} {"level":"info","ts":"2026-07-23T12:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd"} {"level":"info","ts":"2026-07-23T12:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cfadf496d80ed127b3c1eae5aee95c52a6e1b04a3061e4bd95a93ee8c291b826"} {"level":"info","ts":"2026-07-23T12:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91"} {"level":"info","ts":"2026-07-23T12:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dcb1eb0970f6777a4824f814aa021ced714060c09bce8dc2db73c5db6c10b4ad"} {"level":"info","ts":"2026-07-23T12:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5d976cb97db81f7fc205c8bc2893a03f77dbc1d41f6f1a989d49f4d654bbf4fb"} {"level":"info","ts":"2026-07-23T12:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ae4b04fcf59b021fe8bd84c75de6a2cc7008f38d826b5789efb24e4fc6cc861f"} {"level":"info","ts":"2026-07-23T12:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4534a195de5c3aa08af2915176288157fbb8bda090707d02a5f39d21ac7d5177"} {"level":"info","ts":"2026-07-23T12:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/606439ca117d8024f11a87640d5fbee5e292b5c258e1accbeea163c8a3df38e0"} {"level":"info","ts":"2026-07-23T12:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/70257a248a5206106d98597f5fcedd23c1a2569bd7fb231f9e19a0892058fd84"} {"level":"info","ts":"2026-07-23T12:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fead19ab3cec1d9b0f0686aa27fe097e1bbd85fb5a128a6297cd6882944d6409"} {"level":"info","ts":"2026-07-23T12:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2643094e62366febab2f330f794fb81325df3f72c155dd4a476645ec7e8413a2"} {"level":"debug","ts":"2026-07-23T12:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0e26a9375b35cc5546bdf14c56dd5f871a9c65ea3e4dd9914e6d3546e7f3652","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:54:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:54:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0e26a9375b35cc5546bdf14c56dd5f871a9c65ea3e4dd9914e6d3546e7f3652","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0e26a9375b35cc5546bdf14c56dd5f871a9c65ea3e4dd9914e6d3546e7f3652","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:54:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:54:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0e26a9375b35cc5546bdf14c56dd5f871a9c65ea3e4dd9914e6d3546e7f3652"} {"level":"info","ts":"2026-07-23T12:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0e26a9375b35cc5546bdf14c56dd5f871a9c65ea3e4dd9914e6d3546e7f3652","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0e26a9375b35cc5546bdf14c56dd5f871a9c65ea3e4dd9914e6d3546e7f3652","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:54:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:54:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-23T12:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d0e26a9375b35cc5546bdf14c56dd5f871a9c65ea3e4dd9914e6d3546e7f3652","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d0e26a9375b35cc5546bdf14c56dd5f871a9c65ea3e4dd9914e6d3546e7f3652\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T12:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0e26a9375b35cc5546bdf14c56dd5f871a9c65ea3e4dd9914e6d3546e7f3652","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0e26a9375b35cc5546bdf14c56dd5f871a9c65ea3e4dd9914e6d3546e7f3652","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0e26a9375b35cc5546bdf14c56dd5f871a9c65ea3e4dd9914e6d3546e7f3652"} {"level":"info","ts":"2026-07-23T12:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0e26a9375b35cc5546bdf14c56dd5f871a9c65ea3e4dd9914e6d3546e7f3652"} {"level":"debug","ts":"2026-07-23T12:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0e26a9375b35cc5546bdf14c56dd5f871a9c65ea3e4dd9914e6d3546e7f3652","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:54:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:54:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0e26a9375b35cc5546bdf14c56dd5f871a9c65ea3e4dd9914e6d3546e7f3652"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0e26a9375b35cc5546bdf14c56dd5f871a9c65ea3e4dd9914e6d3546e7f3652","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0e26a9375b35cc5546bdf14c56dd5f871a9c65ea3e4dd9914e6d3546e7f3652","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:54:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:54:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0e26a9375b35cc5546bdf14c56dd5f871a9c65ea3e4dd9914e6d3546e7f3652","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0e26a9375b35cc5546bdf14c56dd5f871a9c65ea3e4dd9914e6d3546e7f3652","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0e26a9375b35cc5546bdf14c56dd5f871a9c65ea3e4dd9914e6d3546e7f3652","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0e26a9375b35cc5546bdf14c56dd5f871a9c65ea3e4dd9914e6d3546e7f3652"} {"level":"debug","ts":"2026-07-23T12:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0e26a9375b35cc5546bdf14c56dd5f871a9c65ea3e4dd9914e6d3546e7f3652","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0e26a9375b35cc5546bdf14c56dd5f871a9c65ea3e4dd9914e6d3546e7f3652"} {"level":"debug","ts":"2026-07-23T12:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24cf98595444e7d0eda6719ae1271a7f5450435aece75d692b12669acfa53b92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:54:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:54:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24cf98595444e7d0eda6719ae1271a7f5450435aece75d692b12669acfa53b92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24cf98595444e7d0eda6719ae1271a7f5450435aece75d692b12669acfa53b92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24cf98595444e7d0eda6719ae1271a7f5450435aece75d692b12669acfa53b92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0e26a9375b35cc5546bdf14c56dd5f871a9c65ea3e4dd9914e6d3546e7f3652","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:54:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:54:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0e26a9375b35cc5546bdf14c56dd5f871a9c65ea3e4dd9914e6d3546e7f3652"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24cf98595444e7d0eda6719ae1271a7f5450435aece75d692b12669acfa53b92"} {"level":"info","ts":"2026-07-23T12:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0e26a9375b35cc5546bdf14c56dd5f871a9c65ea3e4dd9914e6d3546e7f3652","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0e26a9375b35cc5546bdf14c56dd5f871a9c65ea3e4dd9914e6d3546e7f3652","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24cf98595444e7d0eda6719ae1271a7f5450435aece75d692b12669acfa53b92","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24cf98595444e7d0eda6719ae1271a7f5450435aece75d692b12669acfa53b92"} {"level":"info","ts":"2026-07-23T12:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0e26a9375b35cc5546bdf14c56dd5f871a9c65ea3e4dd9914e6d3546e7f3652"} {"level":"debug","ts":"2026-07-23T12:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24cf98595444e7d0eda6719ae1271a7f5450435aece75d692b12669acfa53b92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:54:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:54:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24cf98595444e7d0eda6719ae1271a7f5450435aece75d692b12669acfa53b92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24cf98595444e7d0eda6719ae1271a7f5450435aece75d692b12669acfa53b92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24cf98595444e7d0eda6719ae1271a7f5450435aece75d692b12669acfa53b92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:54:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:54:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24cf98595444e7d0eda6719ae1271a7f5450435aece75d692b12669acfa53b92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfeaf184082e9a1a4cdeaf7c2993f122d5838a94d51c43bba00e7361a1d1389a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:54:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:54:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24cf98595444e7d0eda6719ae1271a7f5450435aece75d692b12669acfa53b92"} {"level":"info","ts":"2026-07-23T12:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfeaf184082e9a1a4cdeaf7c2993f122d5838a94d51c43bba00e7361a1d1389a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24cf98595444e7d0eda6719ae1271a7f5450435aece75d692b12669acfa53b92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:54:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:54:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24cf98595444e7d0eda6719ae1271a7f5450435aece75d692b12669acfa53b92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24cf98595444e7d0eda6719ae1271a7f5450435aece75d692b12669acfa53b92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfeaf184082e9a1a4cdeaf7c2993f122d5838a94d51c43bba00e7361a1d1389a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:54:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:54:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfeaf184082e9a1a4cdeaf7c2993f122d5838a94d51c43bba00e7361a1d1389a"} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfeaf184082e9a1a4cdeaf7c2993f122d5838a94d51c43bba00e7361a1d1389a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24cf98595444e7d0eda6719ae1271a7f5450435aece75d692b12669acfa53b92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24cf98595444e7d0eda6719ae1271a7f5450435aece75d692b12669acfa53b92"} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24cf98595444e7d0eda6719ae1271a7f5450435aece75d692b12669acfa53b92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfeaf184082e9a1a4cdeaf7c2993f122d5838a94d51c43bba00e7361a1d1389a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24cf98595444e7d0eda6719ae1271a7f5450435aece75d692b12669acfa53b92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24cf98595444e7d0eda6719ae1271a7f5450435aece75d692b12669acfa53b92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24cf98595444e7d0eda6719ae1271a7f5450435aece75d692b12669acfa53b92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24cf98595444e7d0eda6719ae1271a7f5450435aece75d692b12669acfa53b92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24cf98595444e7d0eda6719ae1271a7f5450435aece75d692b12669acfa53b92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfeaf184082e9a1a4cdeaf7c2993f122d5838a94d51c43bba00e7361a1d1389a"} {"level":"error","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"24cf98595444e7d0eda6719ae1271a7f5450435aece75d692b12669acfa53b92","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"24cf98595444e7d0eda6719ae1271a7f5450435aece75d692b12669acfa53b92\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfeaf184082e9a1a4cdeaf7c2993f122d5838a94d51c43bba00e7361a1d1389a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfeaf184082e9a1a4cdeaf7c2993f122d5838a94d51c43bba00e7361a1d1389a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfeaf184082e9a1a4cdeaf7c2993f122d5838a94d51c43bba00e7361a1d1389a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24cf98595444e7d0eda6719ae1271a7f5450435aece75d692b12669acfa53b92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24cf98595444e7d0eda6719ae1271a7f5450435aece75d692b12669acfa53b92"} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24cf98595444e7d0eda6719ae1271a7f5450435aece75d692b12669acfa53b92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfeaf184082e9a1a4cdeaf7c2993f122d5838a94d51c43bba00e7361a1d1389a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfeaf184082e9a1a4cdeaf7c2993f122d5838a94d51c43bba00e7361a1d1389a"} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfeaf184082e9a1a4cdeaf7c2993f122d5838a94d51c43bba00e7361a1d1389a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24cf98595444e7d0eda6719ae1271a7f5450435aece75d692b12669acfa53b92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfeaf184082e9a1a4cdeaf7c2993f122d5838a94d51c43bba00e7361a1d1389a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfeaf184082e9a1a4cdeaf7c2993f122d5838a94d51c43bba00e7361a1d1389a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24cf98595444e7d0eda6719ae1271a7f5450435aece75d692b12669acfa53b92"} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfeaf184082e9a1a4cdeaf7c2993f122d5838a94d51c43bba00e7361a1d1389a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24cf98595444e7d0eda6719ae1271a7f5450435aece75d692b12669acfa53b92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24cf98595444e7d0eda6719ae1271a7f5450435aece75d692b12669acfa53b92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfeaf184082e9a1a4cdeaf7c2993f122d5838a94d51c43bba00e7361a1d1389a"} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfeaf184082e9a1a4cdeaf7c2993f122d5838a94d51c43bba00e7361a1d1389a"} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24cf98595444e7d0eda6719ae1271a7f5450435aece75d692b12669acfa53b92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfeaf184082e9a1a4cdeaf7c2993f122d5838a94d51c43bba00e7361a1d1389a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24cf98595444e7d0eda6719ae1271a7f5450435aece75d692b12669acfa53b92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24cf98595444e7d0eda6719ae1271a7f5450435aece75d692b12669acfa53b92"} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24cf98595444e7d0eda6719ae1271a7f5450435aece75d692b12669acfa53b92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38dd2d2e0fd528dcf5d88bddc0226b116c1871baeba255de180619864315305a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38dd2d2e0fd528dcf5d88bddc0226b116c1871baeba255de180619864315305a"} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38dd2d2e0fd528dcf5d88bddc0226b116c1871baeba255de180619864315305a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24cf98595444e7d0eda6719ae1271a7f5450435aece75d692b12669acfa53b92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38dd2d2e0fd528dcf5d88bddc0226b116c1871baeba255de180619864315305a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["38dd2d2e0fd528dcf5d88bddc0226b116c1871baeba255de180619864315305a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24cf98595444e7d0eda6719ae1271a7f5450435aece75d692b12669acfa53b92"} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38dd2d2e0fd528dcf5d88bddc0226b116c1871baeba255de180619864315305a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24cf98595444e7d0eda6719ae1271a7f5450435aece75d692b12669acfa53b92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24cf98595444e7d0eda6719ae1271a7f5450435aece75d692b12669acfa53b92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38dd2d2e0fd528dcf5d88bddc0226b116c1871baeba255de180619864315305a"} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24cf98595444e7d0eda6719ae1271a7f5450435aece75d692b12669acfa53b92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38dd2d2e0fd528dcf5d88bddc0226b116c1871baeba255de180619864315305a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38dd2d2e0fd528dcf5d88bddc0226b116c1871baeba255de180619864315305a"} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38dd2d2e0fd528dcf5d88bddc0226b116c1871baeba255de180619864315305a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24cf98595444e7d0eda6719ae1271a7f5450435aece75d692b12669acfa53b92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24cf98595444e7d0eda6719ae1271a7f5450435aece75d692b12669acfa53b92"} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24cf98595444e7d0eda6719ae1271a7f5450435aece75d692b12669acfa53b92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38dd2d2e0fd528dcf5d88bddc0226b116c1871baeba255de180619864315305a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24cf98595444e7d0eda6719ae1271a7f5450435aece75d692b12669acfa53b92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24cf98595444e7d0eda6719ae1271a7f5450435aece75d692b12669acfa53b92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24cf98595444e7d0eda6719ae1271a7f5450435aece75d692b12669acfa53b92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38dd2d2e0fd528dcf5d88bddc0226b116c1871baeba255de180619864315305a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24cf98595444e7d0eda6719ae1271a7f5450435aece75d692b12669acfa53b92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24cf98595444e7d0eda6719ae1271a7f5450435aece75d692b12669acfa53b92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38dd2d2e0fd528dcf5d88bddc0226b116c1871baeba255de180619864315305a"} {"level":"error","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"24cf98595444e7d0eda6719ae1271a7f5450435aece75d692b12669acfa53b92","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"24cf98595444e7d0eda6719ae1271a7f5450435aece75d692b12669acfa53b92\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24cf98595444e7d0eda6719ae1271a7f5450435aece75d692b12669acfa53b92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24cf98595444e7d0eda6719ae1271a7f5450435aece75d692b12669acfa53b92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38dd2d2e0fd528dcf5d88bddc0226b116c1871baeba255de180619864315305a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["38dd2d2e0fd528dcf5d88bddc0226b116c1871baeba255de180619864315305a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24cf98595444e7d0eda6719ae1271a7f5450435aece75d692b12669acfa53b92"} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38dd2d2e0fd528dcf5d88bddc0226b116c1871baeba255de180619864315305a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24cf98595444e7d0eda6719ae1271a7f5450435aece75d692b12669acfa53b92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38dd2d2e0fd528dcf5d88bddc0226b116c1871baeba255de180619864315305a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24cf98595444e7d0eda6719ae1271a7f5450435aece75d692b12669acfa53b92"} {"level":"debug","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9aaaa2b5293e930f05bf25f5f34c1948e165136475b5bcab384a11af3bdb8254","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38dd2d2e0fd528dcf5d88bddc0226b116c1871baeba255de180619864315305a"} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9aaaa2b5293e930f05bf25f5f34c1948e165136475b5bcab384a11af3bdb8254","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24cf98595444e7d0eda6719ae1271a7f5450435aece75d692b12669acfa53b92","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24cf98595444e7d0eda6719ae1271a7f5450435aece75d692b12669acfa53b92"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24cf98595444e7d0eda6719ae1271a7f5450435aece75d692b12669acfa53b92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a67bdb8090decb5b2e44dd8afda8d66c2cd1e0ecf79f8bc54b7936a8d0e4f00a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9aaaa2b5293e930f05bf25f5f34c1948e165136475b5bcab384a11af3bdb8254"} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a67bdb8090decb5b2e44dd8afda8d66c2cd1e0ecf79f8bc54b7936a8d0e4f00a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9aaaa2b5293e930f05bf25f5f34c1948e165136475b5bcab384a11af3bdb8254","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9aaaa2b5293e930f05bf25f5f34c1948e165136475b5bcab384a11af3bdb8254"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a67bdb8090decb5b2e44dd8afda8d66c2cd1e0ecf79f8bc54b7936a8d0e4f00a"} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9aaaa2b5293e930f05bf25f5f34c1948e165136475b5bcab384a11af3bdb8254","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24cf98595444e7d0eda6719ae1271a7f5450435aece75d692b12669acfa53b92","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a67bdb8090decb5b2e44dd8afda8d66c2cd1e0ecf79f8bc54b7936a8d0e4f00a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a67bdb8090decb5b2e44dd8afda8d66c2cd1e0ecf79f8bc54b7936a8d0e4f00a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a67bdb8090decb5b2e44dd8afda8d66c2cd1e0ecf79f8bc54b7936a8d0e4f00a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9aaaa2b5293e930f05bf25f5f34c1948e165136475b5bcab384a11af3bdb8254","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9aaaa2b5293e930f05bf25f5f34c1948e165136475b5bcab384a11af3bdb8254"} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9aaaa2b5293e930f05bf25f5f34c1948e165136475b5bcab384a11af3bdb8254","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a67bdb8090decb5b2e44dd8afda8d66c2cd1e0ecf79f8bc54b7936a8d0e4f00a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9aaaa2b5293e930f05bf25f5f34c1948e165136475b5bcab384a11af3bdb8254","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9aaaa2b5293e930f05bf25f5f34c1948e165136475b5bcab384a11af3bdb8254"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9aaaa2b5293e930f05bf25f5f34c1948e165136475b5bcab384a11af3bdb8254","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9aaaa2b5293e930f05bf25f5f34c1948e165136475b5bcab384a11af3bdb8254","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9aaaa2b5293e930f05bf25f5f34c1948e165136475b5bcab384a11af3bdb8254"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9aaaa2b5293e930f05bf25f5f34c1948e165136475b5bcab384a11af3bdb8254","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9aaaa2b5293e930f05bf25f5f34c1948e165136475b5bcab384a11af3bdb8254\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9aaaa2b5293e930f05bf25f5f34c1948e165136475b5bcab384a11af3bdb8254","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9aaaa2b5293e930f05bf25f5f34c1948e165136475b5bcab384a11af3bdb8254","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24cf98595444e7d0eda6719ae1271a7f5450435aece75d692b12669acfa53b92"} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a67bdb8090decb5b2e44dd8afda8d66c2cd1e0ecf79f8bc54b7936a8d0e4f00a"} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9aaaa2b5293e930f05bf25f5f34c1948e165136475b5bcab384a11af3bdb8254"} {"level":"debug","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294"} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a"} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294"} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a"} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294"} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a"} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a"} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a"} {"level":"debug","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2643094e62366febab2f330f794fb81325df3f72c155dd4a476645ec7e8413a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2643094e62366febab2f330f794fb81325df3f72c155dd4a476645ec7e8413a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2643094e62366febab2f330f794fb81325df3f72c155dd4a476645ec7e8413a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2643094e62366febab2f330f794fb81325df3f72c155dd4a476645ec7e8413a2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2643094e62366febab2f330f794fb81325df3f72c155dd4a476645ec7e8413a2"} {"level":"debug","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2643094e62366febab2f330f794fb81325df3f72c155dd4a476645ec7e8413a2"} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2643094e62366febab2f330f794fb81325df3f72c155dd4a476645ec7e8413a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2643094e62366febab2f330f794fb81325df3f72c155dd4a476645ec7e8413a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2643094e62366febab2f330f794fb81325df3f72c155dd4a476645ec7e8413a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a"} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2643094e62366febab2f330f794fb81325df3f72c155dd4a476645ec7e8413a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2643094e62366febab2f330f794fb81325df3f72c155dd4a476645ec7e8413a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2643094e62366febab2f330f794fb81325df3f72c155dd4a476645ec7e8413a2"} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2643094e62366febab2f330f794fb81325df3f72c155dd4a476645ec7e8413a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2643094e62366febab2f330f794fb81325df3f72c155dd4a476645ec7e8413a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a"} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2643094e62366febab2f330f794fb81325df3f72c155dd4a476645ec7e8413a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b94df117678bd55672063f1e0e5773147f5ce1f81598fcfb1ff856c8a1ec04d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b94df117678bd55672063f1e0e5773147f5ce1f81598fcfb1ff856c8a1ec04d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2643094e62366febab2f330f794fb81325df3f72c155dd4a476645ec7e8413a2"} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b94df117678bd55672063f1e0e5773147f5ce1f81598fcfb1ff856c8a1ec04d"} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2643094e62366febab2f330f794fb81325df3f72c155dd4a476645ec7e8413a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2051c98dcd78da56c5bea20649b8526a0b640e0a510bf6894f3f2a9471fcdd46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd"} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a"} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2051c98dcd78da56c5bea20649b8526a0b640e0a510bf6894f3f2a9471fcdd46","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b94df117678bd55672063f1e0e5773147f5ce1f81598fcfb1ff856c8a1ec04d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:54:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b94df117678bd55672063f1e0e5773147f5ce1f81598fcfb1ff856c8a1ec04d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2051c98dcd78da56c5bea20649b8526a0b640e0a510bf6894f3f2a9471fcdd46"} {"level":"info","ts":"2026-07-23T12:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2643094e62366febab2f330f794fb81325df3f72c155dd4a476645ec7e8413a2"} {"level":"info","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/848d18b1e85a860ba5afd845491c335107baf9f89f4b2ea341f6c58c3b594cfd"} {"level":"info","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b94df117678bd55672063f1e0e5773147f5ce1f81598fcfb1ff856c8a1ec04d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"848d18b1e85a860ba5afd845491c335107baf9f89f4b2ea341f6c58c3b594cfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:54:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:54:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["848d18b1e85a860ba5afd845491c335107baf9f89f4b2ea341f6c58c3b594cfd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd"} {"level":"info","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/722cce07722ade81119764e03241fe830de4838b2c32a33ad793765102d5430d"} {"level":"info","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"848d18b1e85a860ba5afd845491c335107baf9f89f4b2ea341f6c58c3b594cfd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:54:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:54:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca899064bda560d4df7587e48d1e0b7a0faaa7dfd031189b5fe6d8e1aa64c290"} {"level":"info","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2051c98dcd78da56c5bea20649b8526a0b640e0a510bf6894f3f2a9471fcdd46"} {"level":"info","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3eb7b467d5380b9a662730872975d4d01af4eefbc7df92b7033a2c75891fa439"} {"level":"info","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"722cce07722ade81119764e03241fe830de4838b2c32a33ad793765102d5430d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:54:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:54:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["722cce07722ade81119764e03241fe830de4838b2c32a33ad793765102d5430d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ba07fd8b959add16591f284c3e9b9030166090aa09b8a3555860b1c161e1e38"} {"level":"info","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/938b3d54720417de8effbb588ac8e6a298b4ddf1d57890d449d55dec7cef34bf"} {"level":"info","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"722cce07722ade81119764e03241fe830de4838b2c32a33ad793765102d5430d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca899064bda560d4df7587e48d1e0b7a0faaa7dfd031189b5fe6d8e1aa64c290","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:54:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:54:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca899064bda560d4df7587e48d1e0b7a0faaa7dfd031189b5fe6d8e1aa64c290"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b94df117678bd55672063f1e0e5773147f5ce1f81598fcfb1ff856c8a1ec04d"} {"level":"info","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4c95b9dfe1fdc12ff7aefc525b74b46793414910472dae190544f98617bc5f7"} {"level":"info","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4534a195de5c3aa08af2915176288157fbb8bda090707d02a5f39d21ac7d5177"} {"level":"info","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca899064bda560d4df7587e48d1e0b7a0faaa7dfd031189b5fe6d8e1aa64c290","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2051c98dcd78da56c5bea20649b8526a0b640e0a510bf6894f3f2a9471fcdd46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:54:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:54:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2051c98dcd78da56c5bea20649b8526a0b640e0a510bf6894f3f2a9471fcdd46"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/848d18b1e85a860ba5afd845491c335107baf9f89f4b2ea341f6c58c3b594cfd"} {"level":"info","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91"} {"level":"info","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2051c98dcd78da56c5bea20649b8526a0b640e0a510bf6894f3f2a9471fcdd46","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3eb7b467d5380b9a662730872975d4d01af4eefbc7df92b7033a2c75891fa439","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:54:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:54:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3eb7b467d5380b9a662730872975d4d01af4eefbc7df92b7033a2c75891fa439"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b050df4735de7357c856fedbf3ebde69c73031e5a1bb7a46a6351af1b5ecc9e"} {"level":"info","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3eb7b467d5380b9a662730872975d4d01af4eefbc7df92b7033a2c75891fa439","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ba07fd8b959add16591f284c3e9b9030166090aa09b8a3555860b1c161e1e38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:54:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:54:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ba07fd8b959add16591f284c3e9b9030166090aa09b8a3555860b1c161e1e38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd"} {"level":"info","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ba07fd8b959add16591f284c3e9b9030166090aa09b8a3555860b1c161e1e38","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"938b3d54720417de8effbb588ac8e6a298b4ddf1d57890d449d55dec7cef34bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:54:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:54:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["938b3d54720417de8effbb588ac8e6a298b4ddf1d57890d449d55dec7cef34bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/722cce07722ade81119764e03241fe830de4838b2c32a33ad793765102d5430d"} {"level":"info","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca899064bda560d4df7587e48d1e0b7a0faaa7dfd031189b5fe6d8e1aa64c290"} {"level":"info","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"938b3d54720417de8effbb588ac8e6a298b4ddf1d57890d449d55dec7cef34bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b94df117678bd55672063f1e0e5773147f5ce1f81598fcfb1ff856c8a1ec04d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4c95b9dfe1fdc12ff7aefc525b74b46793414910472dae190544f98617bc5f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:54:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:54:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4c95b9dfe1fdc12ff7aefc525b74b46793414910472dae190544f98617bc5f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1b0708b4bbfcdf5cfbe9d1aa496c37998c989a2dad0be7a8cf1ddd009a7024b"} {"level":"info","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2051c98dcd78da56c5bea20649b8526a0b640e0a510bf6894f3f2a9471fcdd46"} {"level":"info","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4c95b9dfe1fdc12ff7aefc525b74b46793414910472dae190544f98617bc5f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4534a195de5c3aa08af2915176288157fbb8bda090707d02a5f39d21ac7d5177","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:54:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:54:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4534a195de5c3aa08af2915176288157fbb8bda090707d02a5f39d21ac7d5177"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3eb7b467d5380b9a662730872975d4d01af4eefbc7df92b7033a2c75891fa439"} {"level":"info","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2b84fd691d7bfeca4af1e6f231ddef699809de1971b4559d6de97e73308dec0"} {"level":"info","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4534a195de5c3aa08af2915176288157fbb8bda090707d02a5f39d21ac7d5177","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"848d18b1e85a860ba5afd845491c335107baf9f89f4b2ea341f6c58c3b594cfd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:54:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:54:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ba07fd8b959add16591f284c3e9b9030166090aa09b8a3555860b1c161e1e38"} {"level":"info","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/938b3d54720417de8effbb588ac8e6a298b4ddf1d57890d449d55dec7cef34bf"} {"level":"info","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4c95b9dfe1fdc12ff7aefc525b74b46793414910472dae190544f98617bc5f7"} {"level":"info","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b050df4735de7357c856fedbf3ebde69c73031e5a1bb7a46a6351af1b5ecc9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:54:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:54:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b050df4735de7357c856fedbf3ebde69c73031e5a1bb7a46a6351af1b5ecc9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4534a195de5c3aa08af2915176288157fbb8bda090707d02a5f39d21ac7d5177"} {"level":"info","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91"} {"level":"info","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b050df4735de7357c856fedbf3ebde69c73031e5a1bb7a46a6351af1b5ecc9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"722cce07722ade81119764e03241fe830de4838b2c32a33ad793765102d5430d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca899064bda560d4df7587e48d1e0b7a0faaa7dfd031189b5fe6d8e1aa64c290","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1b0708b4bbfcdf5cfbe9d1aa496c37998c989a2dad0be7a8cf1ddd009a7024b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:54:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:54:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1b0708b4bbfcdf5cfbe9d1aa496c37998c989a2dad0be7a8cf1ddd009a7024b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b050df4735de7357c856fedbf3ebde69c73031e5a1bb7a46a6351af1b5ecc9e"} {"level":"info","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1b0708b4bbfcdf5cfbe9d1aa496c37998c989a2dad0be7a8cf1ddd009a7024b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2051c98dcd78da56c5bea20649b8526a0b640e0a510bf6894f3f2a9471fcdd46","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3eb7b467d5380b9a662730872975d4d01af4eefbc7df92b7033a2c75891fa439","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2b84fd691d7bfeca4af1e6f231ddef699809de1971b4559d6de97e73308dec0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:54:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:54:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2b84fd691d7bfeca4af1e6f231ddef699809de1971b4559d6de97e73308dec0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1b0708b4bbfcdf5cfbe9d1aa496c37998c989a2dad0be7a8cf1ddd009a7024b"} {"level":"info","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2b84fd691d7bfeca4af1e6f231ddef699809de1971b4559d6de97e73308dec0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ba07fd8b959add16591f284c3e9b9030166090aa09b8a3555860b1c161e1e38","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"938b3d54720417de8effbb588ac8e6a298b4ddf1d57890d449d55dec7cef34bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4c95b9dfe1fdc12ff7aefc525b74b46793414910472dae190544f98617bc5f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4534a195de5c3aa08af2915176288157fbb8bda090707d02a5f39d21ac7d5177","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b050df4735de7357c856fedbf3ebde69c73031e5a1bb7a46a6351af1b5ecc9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1b0708b4bbfcdf5cfbe9d1aa496c37998c989a2dad0be7a8cf1ddd009a7024b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2b84fd691d7bfeca4af1e6f231ddef699809de1971b4559d6de97e73308dec0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:54:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:54:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2b84fd691d7bfeca4af1e6f231ddef699809de1971b4559d6de97e73308dec0"} {"level":"info","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2b84fd691d7bfeca4af1e6f231ddef699809de1971b4559d6de97e73308dec0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2b84fd691d7bfeca4af1e6f231ddef699809de1971b4559d6de97e73308dec0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2b84fd691d7bfeca4af1e6f231ddef699809de1971b4559d6de97e73308dec0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2b84fd691d7bfeca4af1e6f231ddef699809de1971b4559d6de97e73308dec0"} {"level":"debug","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2b84fd691d7bfeca4af1e6f231ddef699809de1971b4559d6de97e73308dec0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:54:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:54:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2b84fd691d7bfeca4af1e6f231ddef699809de1971b4559d6de97e73308dec0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2b84fd691d7bfeca4af1e6f231ddef699809de1971b4559d6de97e73308dec0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2b84fd691d7bfeca4af1e6f231ddef699809de1971b4559d6de97e73308dec0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2b84fd691d7bfeca4af1e6f231ddef699809de1971b4559d6de97e73308dec0"} {"level":"info","ts":"2026-07-23T12:54:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e7867f0a-0217-4faa-87d6-a249c187eb6b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:42218","PortSpecifier":{"PortValue":42218}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e7867f0a-0217-4faa-87d6-a249c187eb6b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d45fc5.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T12:54:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e7867f0a-0217-4faa-87d6-a249c187eb6b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:42218","PortSpecifier":{"PortValue":42218}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784811277,"nanos":765979592},"http":{"id":"e7867f0a-0217-4faa-87d6-a249c187eb6b","method":"POST","headers":{":authority":"e2e-shared-a-d45fc5.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T12:54:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e7867f0a-0217-4faa-87d6-a249c187eb6b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T12:54:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e7867f0a-0217-4faa-87d6-a249c187eb6b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"687ee252-a56c-49e3-84a4-23a94a9873c7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=30e8b036-3ed3-43e5-931c-4159ec0e5ea7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9e9814df6731"]}} {"level":"debug","ts":"2026-07-23T12:54:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e7867f0a-0217-4faa-87d6-a249c187eb6b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9e9814df6731"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=30e8b036-3ed3-43e5-931c-4159ec0e5ea7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"687ee252-a56c-49e3-84a4-23a94a9873c7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9ba07fd8b959add16591f284c3e9b9030166090aa09b8a3555860b1c161e1e38"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d45fc5.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T12:54:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7867f0a-0217-4faa-87d6-a249c187eb6b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:54:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7867f0a-0217-4faa-87d6-a249c187eb6b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:54:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7867f0a-0217-4faa-87d6-a249c187eb6b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d45fc5/sub-test-model-d45fc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d45fc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:54:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e7867f0a-0217-4faa-87d6-a249c187eb6b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T12:54:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7867f0a-0217-4faa-87d6-a249c187eb6b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T12:54:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7867f0a-0217-4faa-87d6-a249c187eb6b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-23T12:54:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e7867f0a-0217-4faa-87d6-a249c187eb6b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T12:54:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e7867f0a-0217-4faa-87d6-a249c187eb6b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T12:54:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e1732d60-cdaa-479e-b76f-c81078993bf6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:53314","PortSpecifier":{"PortValue":53314}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e1732d60-cdaa-479e-b76f-c81078993bf6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-474ecb.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T12:54:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e1732d60-cdaa-479e-b76f-c81078993bf6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:53314","PortSpecifier":{"PortValue":53314}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784811277,"nanos":816587530},"http":{"id":"e1732d60-cdaa-479e-b76f-c81078993bf6","method":"POST","headers":{":authority":"e2e-shared-b-474ecb.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T12:54:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e1732d60-cdaa-479e-b76f-c81078993bf6","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T12:54:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e1732d60-cdaa-479e-b76f-c81078993bf6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"687ee252-a56c-49e3-84a4-23a94a9873c7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=30e8b036-3ed3-43e5-931c-4159ec0e5ea7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9e9814df6731"]}} {"level":"debug","ts":"2026-07-23T12:54:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e1732d60-cdaa-479e-b76f-c81078993bf6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9e9814df6731"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=30e8b036-3ed3-43e5-931c-4159ec0e5ea7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"687ee252-a56c-49e3-84a4-23a94a9873c7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-474ecb.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T12:54:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1732d60-cdaa-479e-b76f-c81078993bf6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:54:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1732d60-cdaa-479e-b76f-c81078993bf6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:54:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1732d60-cdaa-479e-b76f-c81078993bf6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-474ecb/sub-test-model-474ecb\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-474ecb/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:54:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e1732d60-cdaa-479e-b76f-c81078993bf6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T12:54:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1732d60-cdaa-479e-b76f-c81078993bf6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T12:54:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1732d60-cdaa-479e-b76f-c81078993bf6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T12:54:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e1732d60-cdaa-479e-b76f-c81078993bf6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T12:54:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e1732d60-cdaa-479e-b76f-c81078993bf6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T12:54:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"26ded793-cc6c-4db5-9471-3b06623c9899","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:42228","PortSpecifier":{"PortValue":42228}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"26ded793-cc6c-4db5-9471-3b06623c9899","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-d45fc5.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T12:54:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"26ded793-cc6c-4db5-9471-3b06623c9899","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:42228","PortSpecifier":{"PortValue":42228}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784811277,"nanos":857515153},"http":{"id":"26ded793-cc6c-4db5-9471-3b06623c9899","method":"GET","headers":{":authority":"e2e-shared-a-d45fc5.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T12:54:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"26ded793-cc6c-4db5-9471-3b06623c9899","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-GOQmHpRvknmixkJ9_xQnLCIOkDvkCFmqyauskHrDLnuylgPwsBelQcu4M1Jw"} {"level":"debug","ts":"2026-07-23T12:54:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"26ded793-cc6c-4db5-9471-3b06623c9899","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d45fc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-GOQmHpRvknmixkJ9_xQnLCIOkDvkCFmqyauskHrDLnuylgPwsBelQcu4M1Jw\"}"} {"level":"debug","ts":"2026-07-23T12:54:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"26ded793-cc6c-4db5-9471-3b06623c9899","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d45fc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b2af5ced-f2e8-4d6e-bf3d-3fb305092a94","keyName":"e2e-sub-iso-7a29f9","subscription":"e2e-a-only-0deaa3","tenant":"e2e-shared-a-d45fc5","userId":"b2af5ced-f2e8-4d6e-bf3d-3fb305092a94","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T12:54:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"26ded793-cc6c-4db5-9471-3b06623c9899","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T12:54:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26ded793-cc6c-4db5-9471-3b06623c9899","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:54:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26ded793-cc6c-4db5-9471-3b06623c9899","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:54:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26ded793-cc6c-4db5-9471-3b06623c9899","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d45fc5/sub-test-model-d45fc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d45fc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:54:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"26ded793-cc6c-4db5-9471-3b06623c9899","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-23T12:54:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26ded793-cc6c-4db5-9471-3b06623c9899","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T12:54:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26ded793-cc6c-4db5-9471-3b06623c9899","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T12:54:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26ded793-cc6c-4db5-9471-3b06623c9899","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-0deaa3"} {"level":"info","ts":"2026-07-23T12:54:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"26ded793-cc6c-4db5-9471-3b06623c9899","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T12:54:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"26ded793-cc6c-4db5-9471-3b06623c9899","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T12:54:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bcfd5d3a-61b1-4f88-9988-e74299efe528","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:53324","PortSpecifier":{"PortValue":53324}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bcfd5d3a-61b1-4f88-9988-e74299efe528","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-474ecb.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T12:54:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bcfd5d3a-61b1-4f88-9988-e74299efe528","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:53324","PortSpecifier":{"PortValue":53324}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784811277,"nanos":909986495},"http":{"id":"bcfd5d3a-61b1-4f88-9988-e74299efe528","method":"GET","headers":{":authority":"e2e-shared-b-474ecb.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T12:54:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bcfd5d3a-61b1-4f88-9988-e74299efe528","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-h14gxEwhzkO86B4n_2PsYRb1KFUHzyuMla1nVU2BkiQv7UZpYiuBNMJDp5Qt"} {"level":"debug","ts":"2026-07-23T12:54:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bcfd5d3a-61b1-4f88-9988-e74299efe528","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-474ecb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-h14gxEwhzkO86B4n_2PsYRb1KFUHzyuMla1nVU2BkiQv7UZpYiuBNMJDp5Qt\"}"} {"level":"debug","ts":"2026-07-23T12:54:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bcfd5d3a-61b1-4f88-9988-e74299efe528","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-474ecb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8a68196e-b181-49bb-831a-9ffaa276c419","keyName":"e2e-sub-iso-3930af","subscription":"e2e-b-only-0deaa3","tenant":"e2e-shared-b-474ecb","userId":"8a68196e-b181-49bb-831a-9ffaa276c419","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T12:54:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bcfd5d3a-61b1-4f88-9988-e74299efe528","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T12:54:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bcfd5d3a-61b1-4f88-9988-e74299efe528","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:54:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bcfd5d3a-61b1-4f88-9988-e74299efe528","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:54:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bcfd5d3a-61b1-4f88-9988-e74299efe528","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-474ecb/sub-test-model-474ecb\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-474ecb/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:54:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bcfd5d3a-61b1-4f88-9988-e74299efe528","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T12:54:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bcfd5d3a-61b1-4f88-9988-e74299efe528","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T12:54:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bcfd5d3a-61b1-4f88-9988-e74299efe528","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-0deaa3"} {"level":"debug","ts":"2026-07-23T12:54:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bcfd5d3a-61b1-4f88-9988-e74299efe528","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-23T12:54:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bcfd5d3a-61b1-4f88-9988-e74299efe528","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T12:54:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bcfd5d3a-61b1-4f88-9988-e74299efe528","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e4db3a1e-63be-484d-817c-2525755902e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:42970","PortSpecifier":{"PortValue":42970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e4db3a1e-63be-484d-817c-2525755902e1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d45fc5.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e4db3a1e-63be-484d-817c-2525755902e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:42970","PortSpecifier":{"PortValue":42970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784811288,"nanos":126343990},"http":{"id":"e4db3a1e-63be-484d-817c-2525755902e1","method":"POST","headers":{":authority":"e2e-shared-a-d45fc5.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e4db3a1e-63be-484d-817c-2525755902e1","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e4db3a1e-63be-484d-817c-2525755902e1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"687ee252-a56c-49e3-84a4-23a94a9873c7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=30e8b036-3ed3-43e5-931c-4159ec0e5ea7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9e9814df6731"]}} {"level":"debug","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e4db3a1e-63be-484d-817c-2525755902e1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9e9814df6731"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=30e8b036-3ed3-43e5-931c-4159ec0e5ea7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"687ee252-a56c-49e3-84a4-23a94a9873c7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9ba07fd8b959add16591f284c3e9b9030166090aa09b8a3555860b1c161e1e38"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d45fc5.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4db3a1e-63be-484d-817c-2525755902e1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4db3a1e-63be-484d-817c-2525755902e1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4db3a1e-63be-484d-817c-2525755902e1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d45fc5/sub-test-model-d45fc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d45fc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e4db3a1e-63be-484d-817c-2525755902e1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4db3a1e-63be-484d-817c-2525755902e1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4db3a1e-63be-484d-817c-2525755902e1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e4db3a1e-63be-484d-817c-2525755902e1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e4db3a1e-63be-484d-817c-2525755902e1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eccb736a-54c6-4e81-aefd-f637e294cb74","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:46138","PortSpecifier":{"PortValue":46138}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"eccb736a-54c6-4e81-aefd-f637e294cb74","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-474ecb.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eccb736a-54c6-4e81-aefd-f637e294cb74","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:46138","PortSpecifier":{"PortValue":46138}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784811288,"nanos":165394538},"http":{"id":"eccb736a-54c6-4e81-aefd-f637e294cb74","method":"POST","headers":{":authority":"e2e-shared-b-474ecb.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"eccb736a-54c6-4e81-aefd-f637e294cb74","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"eccb736a-54c6-4e81-aefd-f637e294cb74","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"687ee252-a56c-49e3-84a4-23a94a9873c7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=30e8b036-3ed3-43e5-931c-4159ec0e5ea7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9e9814df6731"]}} {"level":"debug","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"eccb736a-54c6-4e81-aefd-f637e294cb74","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9e9814df6731"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=30e8b036-3ed3-43e5-931c-4159ec0e5ea7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"687ee252-a56c-49e3-84a4-23a94a9873c7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-474ecb.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eccb736a-54c6-4e81-aefd-f637e294cb74","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eccb736a-54c6-4e81-aefd-f637e294cb74","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eccb736a-54c6-4e81-aefd-f637e294cb74","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-474ecb/sub-test-model-474ecb\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-474ecb/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"eccb736a-54c6-4e81-aefd-f637e294cb74","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eccb736a-54c6-4e81-aefd-f637e294cb74","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eccb736a-54c6-4e81-aefd-f637e294cb74","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eccb736a-54c6-4e81-aefd-f637e294cb74","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eccb736a-54c6-4e81-aefd-f637e294cb74","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8c4ae201-483c-4cd4-92c3-cf2ec8215d3a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:42984","PortSpecifier":{"PortValue":42984}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8c4ae201-483c-4cd4-92c3-cf2ec8215d3a","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-d45fc5.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8c4ae201-483c-4cd4-92c3-cf2ec8215d3a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:42984","PortSpecifier":{"PortValue":42984}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784811288,"nanos":201008158},"http":{"id":"8c4ae201-483c-4cd4-92c3-cf2ec8215d3a","method":"POST","headers":{":authority":"e2e-shared-a-d45fc5.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8c4ae201-483c-4cd4-92c3-cf2ec8215d3a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-2b6wV6si4L6l8i2L_924gY2DPgftvpP3qIswhyC4xmectASEuuhWxrid2okN"} {"level":"debug","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8c4ae201-483c-4cd4-92c3-cf2ec8215d3a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d45fc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-2b6wV6si4L6l8i2L_924gY2DPgftvpP3qIswhyC4xmectASEuuhWxrid2okN\"}"} {"level":"debug","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8c4ae201-483c-4cd4-92c3-cf2ec8215d3a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d45fc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"453fb3a4-c712-4574-8406-9890a8dde463","keyName":"e2e-sub-iso-f46c1c","subscription":"e2e-shared-sub-d3df82","tenant":"e2e-shared-a-d45fc5","userId":"453fb3a4-c712-4574-8406-9890a8dde463","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8c4ae201-483c-4cd4-92c3-cf2ec8215d3a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c4ae201-483c-4cd4-92c3-cf2ec8215d3a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c4ae201-483c-4cd4-92c3-cf2ec8215d3a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c4ae201-483c-4cd4-92c3-cf2ec8215d3a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d45fc5/sub-test-model-d45fc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d45fc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8c4ae201-483c-4cd4-92c3-cf2ec8215d3a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c4ae201-483c-4cd4-92c3-cf2ec8215d3a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c4ae201-483c-4cd4-92c3-cf2ec8215d3a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c4ae201-483c-4cd4-92c3-cf2ec8215d3a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-d3df82"} {"level":"info","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8c4ae201-483c-4cd4-92c3-cf2ec8215d3a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8c4ae201-483c-4cd4-92c3-cf2ec8215d3a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"35ce3343-e3e2-477d-9f15-4789e5bb64bc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:46146","PortSpecifier":{"PortValue":46146}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"35ce3343-e3e2-477d-9f15-4789e5bb64bc","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-474ecb.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"35ce3343-e3e2-477d-9f15-4789e5bb64bc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:46146","PortSpecifier":{"PortValue":46146}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784811288,"nanos":233718482},"http":{"id":"35ce3343-e3e2-477d-9f15-4789e5bb64bc","method":"POST","headers":{":authority":"e2e-shared-b-474ecb.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"35ce3343-e3e2-477d-9f15-4789e5bb64bc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-QoLRw0dlCidihovj_6jfX21Fubombey8AwC8Ba1uyqee2OphoAYjZlETApcF"} {"level":"debug","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"35ce3343-e3e2-477d-9f15-4789e5bb64bc","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-474ecb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-QoLRw0dlCidihovj_6jfX21Fubombey8AwC8Ba1uyqee2OphoAYjZlETApcF\"}"} {"level":"debug","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"35ce3343-e3e2-477d-9f15-4789e5bb64bc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-474ecb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a4a0b0a3-071a-446d-96e0-4b8eaaeedf68","keyName":"e2e-sub-iso-29367e","subscription":"e2e-shared-sub-d3df82","tenant":"e2e-shared-b-474ecb","userId":"a4a0b0a3-071a-446d-96e0-4b8eaaeedf68","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"35ce3343-e3e2-477d-9f15-4789e5bb64bc","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35ce3343-e3e2-477d-9f15-4789e5bb64bc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35ce3343-e3e2-477d-9f15-4789e5bb64bc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35ce3343-e3e2-477d-9f15-4789e5bb64bc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-474ecb/sub-test-model-474ecb\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-474ecb/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"35ce3343-e3e2-477d-9f15-4789e5bb64bc","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-d3df82"} {"level":"debug","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"35ce3343-e3e2-477d-9f15-4789e5bb64bc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"35ce3343-e3e2-477d-9f15-4789e5bb64bc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"35ce3343-e3e2-477d-9f15-4789e5bb64bc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"35ce3343-e3e2-477d-9f15-4789e5bb64bc","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"35ce3343-e3e2-477d-9f15-4789e5bb64bc","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T12:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/938b3d54720417de8effbb588ac8e6a298b4ddf1d57890d449d55dec7cef34bf"} {"level":"info","ts":"2026-07-23T12:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/38dd2d2e0fd528dcf5d88bddc0226b116c1871baeba255de180619864315305a"} {"level":"info","ts":"2026-07-23T12:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a67bdb8090decb5b2e44dd8afda8d66c2cd1e0ecf79f8bc54b7936a8d0e4f00a"} {"level":"info","ts":"2026-07-23T12:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/848d18b1e85a860ba5afd845491c335107baf9f89f4b2ea341f6c58c3b594cfd"} {"level":"info","ts":"2026-07-23T12:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd"} {"level":"info","ts":"2026-07-23T12:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/722cce07722ade81119764e03241fe830de4838b2c32a33ad793765102d5430d"} {"level":"info","ts":"2026-07-23T12:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e1b0708b4bbfcdf5cfbe9d1aa496c37998c989a2dad0be7a8cf1ddd009a7024b"} {"level":"info","ts":"2026-07-23T12:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91"} {"level":"info","ts":"2026-07-23T12:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d0e26a9375b35cc5546bdf14c56dd5f871a9c65ea3e4dd9914e6d3546e7f3652"} {"level":"info","ts":"2026-07-23T12:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/24cf98595444e7d0eda6719ae1271a7f5450435aece75d692b12669acfa53b92"} {"level":"info","ts":"2026-07-23T12:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9aaaa2b5293e930f05bf25f5f34c1948e165136475b5bcab384a11af3bdb8254"} {"level":"info","ts":"2026-07-23T12:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294"} {"level":"info","ts":"2026-07-23T12:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ca899064bda560d4df7587e48d1e0b7a0faaa7dfd031189b5fe6d8e1aa64c290"} {"level":"info","ts":"2026-07-23T12:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2643094e62366febab2f330f794fb81325df3f72c155dd4a476645ec7e8413a2"} {"level":"info","ts":"2026-07-23T12:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2051c98dcd78da56c5bea20649b8526a0b640e0a510bf6894f3f2a9471fcdd46"} {"level":"info","ts":"2026-07-23T12:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b4c95b9dfe1fdc12ff7aefc525b74b46793414910472dae190544f98617bc5f7"} {"level":"info","ts":"2026-07-23T12:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4534a195de5c3aa08af2915176288157fbb8bda090707d02a5f39d21ac7d5177"} {"level":"info","ts":"2026-07-23T12:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bfeaf184082e9a1a4cdeaf7c2993f122d5838a94d51c43bba00e7361a1d1389a"} {"level":"info","ts":"2026-07-23T12:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a"} {"level":"info","ts":"2026-07-23T12:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9ba07fd8b959add16591f284c3e9b9030166090aa09b8a3555860b1c161e1e38"} {"level":"info","ts":"2026-07-23T12:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3eb7b467d5380b9a662730872975d4d01af4eefbc7df92b7033a2c75891fa439"} {"level":"info","ts":"2026-07-23T12:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d2b84fd691d7bfeca4af1e6f231ddef699809de1971b4559d6de97e73308dec0"} {"level":"info","ts":"2026-07-23T12:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5b94df117678bd55672063f1e0e5773147f5ce1f81598fcfb1ff856c8a1ec04d"} {"level":"info","ts":"2026-07-23T12:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5b050df4735de7357c856fedbf3ebde69c73031e5a1bb7a46a6351af1b5ecc9e"} {"level":"debug","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a317fe8cbf91b0c597eff9514a9d94da5abfd00446fc6a76bfda0dfec80c2d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:55:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:55:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a317fe8cbf91b0c597eff9514a9d94da5abfd00446fc6a76bfda0dfec80c2d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a317fe8cbf91b0c597eff9514a9d94da5abfd00446fc6a76bfda0dfec80c2d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a317fe8cbf91b0c597eff9514a9d94da5abfd00446fc6a76bfda0dfec80c2d4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a317fe8cbf91b0c597eff9514a9d94da5abfd00446fc6a76bfda0dfec80c2d4"} {"level":"debug","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a317fe8cbf91b0c597eff9514a9d94da5abfd00446fc6a76bfda0dfec80c2d4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a317fe8cbf91b0c597eff9514a9d94da5abfd00446fc6a76bfda0dfec80c2d4"} {"level":"debug","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a317fe8cbf91b0c597eff9514a9d94da5abfd00446fc6a76bfda0dfec80c2d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:55:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:55:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a317fe8cbf91b0c597eff9514a9d94da5abfd00446fc6a76bfda0dfec80c2d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a317fe8cbf91b0c597eff9514a9d94da5abfd00446fc6a76bfda0dfec80c2d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a317fe8cbf91b0c597eff9514a9d94da5abfd00446fc6a76bfda0dfec80c2d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:55:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:55:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a317fe8cbf91b0c597eff9514a9d94da5abfd00446fc6a76bfda0dfec80c2d4"} {"level":"debug","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:55:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:55:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294"} {"level":"info","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294"} {"level":"debug","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:55:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:55:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:55:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:55:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294"} {"level":"debug","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294"} {"level":"debug","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:55:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:55:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89b708725cbd515d98fe22a4abd83d809092938cb968ea45af8ccf30eadc04fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:55:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:55:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89b708725cbd515d98fe22a4abd83d809092938cb968ea45af8ccf30eadc04fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89b708725cbd515d98fe22a4abd83d809092938cb968ea45af8ccf30eadc04fe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89b708725cbd515d98fe22a4abd83d809092938cb968ea45af8ccf30eadc04fe"} {"level":"debug","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89b708725cbd515d98fe22a4abd83d809092938cb968ea45af8ccf30eadc04fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:55:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:55:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89b708725cbd515d98fe22a4abd83d809092938cb968ea45af8ccf30eadc04fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89b708725cbd515d98fe22a4abd83d809092938cb968ea45af8ccf30eadc04fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89b708725cbd515d98fe22a4abd83d809092938cb968ea45af8ccf30eadc04fe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294"} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89b708725cbd515d98fe22a4abd83d809092938cb968ea45af8ccf30eadc04fe"} {"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"722cce07722ade81119764e03241fe830de4838b2c32a33ad793765102d5430d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"722cce07722ade81119764e03241fe830de4838b2c32a33ad793765102d5430d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"722cce07722ade81119764e03241fe830de4838b2c32a33ad793765102d5430d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/722cce07722ade81119764e03241fe830de4838b2c32a33ad793765102d5430d"} {"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"722cce07722ade81119764e03241fe830de4838b2c32a33ad793765102d5430d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"722cce07722ade81119764e03241fe830de4838b2c32a33ad793765102d5430d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/722cce07722ade81119764e03241fe830de4838b2c32a33ad793765102d5430d"} {"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"722cce07722ade81119764e03241fe830de4838b2c32a33ad793765102d5430d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["722cce07722ade81119764e03241fe830de4838b2c32a33ad793765102d5430d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"722cce07722ade81119764e03241fe830de4838b2c32a33ad793765102d5430d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"722cce07722ade81119764e03241fe830de4838b2c32a33ad793765102d5430d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"722cce07722ade81119764e03241fe830de4838b2c32a33ad793765102d5430d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76e7653f9ec1bdcd2876cd5d2f51c8027c95d9792740c64cf69e22ef1847cc76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/722cce07722ade81119764e03241fe830de4838b2c32a33ad793765102d5430d"} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76e7653f9ec1bdcd2876cd5d2f51c8027c95d9792740c64cf69e22ef1847cc76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"722cce07722ade81119764e03241fe830de4838b2c32a33ad793765102d5430d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["722cce07722ade81119764e03241fe830de4838b2c32a33ad793765102d5430d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"722cce07722ade81119764e03241fe830de4838b2c32a33ad793765102d5430d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76e7653f9ec1bdcd2876cd5d2f51c8027c95d9792740c64cf69e22ef1847cc76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76e7653f9ec1bdcd2876cd5d2f51c8027c95d9792740c64cf69e22ef1847cc76"} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76e7653f9ec1bdcd2876cd5d2f51c8027c95d9792740c64cf69e22ef1847cc76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"722cce07722ade81119764e03241fe830de4838b2c32a33ad793765102d5430d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/722cce07722ade81119764e03241fe830de4838b2c32a33ad793765102d5430d"} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"722cce07722ade81119764e03241fe830de4838b2c32a33ad793765102d5430d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76e7653f9ec1bdcd2876cd5d2f51c8027c95d9792740c64cf69e22ef1847cc76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"722cce07722ade81119764e03241fe830de4838b2c32a33ad793765102d5430d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["722cce07722ade81119764e03241fe830de4838b2c32a33ad793765102d5430d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"722cce07722ade81119764e03241fe830de4838b2c32a33ad793765102d5430d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"722cce07722ade81119764e03241fe830de4838b2c32a33ad793765102d5430d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["722cce07722ade81119764e03241fe830de4838b2c32a33ad793765102d5430d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76e7653f9ec1bdcd2876cd5d2f51c8027c95d9792740c64cf69e22ef1847cc76"} {"level":"error","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"722cce07722ade81119764e03241fe830de4838b2c32a33ad793765102d5430d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"722cce07722ade81119764e03241fe830de4838b2c32a33ad793765102d5430d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76e7653f9ec1bdcd2876cd5d2f51c8027c95d9792740c64cf69e22ef1847cc76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76e7653f9ec1bdcd2876cd5d2f51c8027c95d9792740c64cf69e22ef1847cc76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/722cce07722ade81119764e03241fe830de4838b2c32a33ad793765102d5430d"} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76e7653f9ec1bdcd2876cd5d2f51c8027c95d9792740c64cf69e22ef1847cc76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"722cce07722ade81119764e03241fe830de4838b2c32a33ad793765102d5430d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76e7653f9ec1bdcd2876cd5d2f51c8027c95d9792740c64cf69e22ef1847cc76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a9947b6b66994d724145b352c1026fcb4847549bf442d68633ca5a0afedc1fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a9947b6b66994d724145b352c1026fcb4847549bf442d68633ca5a0afedc1fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a9947b6b66994d724145b352c1026fcb4847549bf442d68633ca5a0afedc1fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a9947b6b66994d724145b352c1026fcb4847549bf442d68633ca5a0afedc1fe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76e7653f9ec1bdcd2876cd5d2f51c8027c95d9792740c64cf69e22ef1847cc76"} {"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a9947b6b66994d724145b352c1026fcb4847549bf442d68633ca5a0afedc1fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a9947b6b66994d724145b352c1026fcb4847549bf442d68633ca5a0afedc1fe"} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a9947b6b66994d724145b352c1026fcb4847549bf442d68633ca5a0afedc1fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a9947b6b66994d724145b352c1026fcb4847549bf442d68633ca5a0afedc1fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a9947b6b66994d724145b352c1026fcb4847549bf442d68633ca5a0afedc1fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a9947b6b66994d724145b352c1026fcb4847549bf442d68633ca5a0afedc1fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a9947b6b66994d724145b352c1026fcb4847549bf442d68633ca5a0afedc1fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a9947b6b66994d724145b352c1026fcb4847549bf442d68633ca5a0afedc1fe"} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a9947b6b66994d724145b352c1026fcb4847549bf442d68633ca5a0afedc1fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a9947b6b66994d724145b352c1026fcb4847549bf442d68633ca5a0afedc1fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a9947b6b66994d724145b352c1026fcb4847549bf442d68633ca5a0afedc1fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a31546b9e3a82930b19f2745a6dfe059b0d48dba1b476383ec94330d0290601b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a9947b6b66994d724145b352c1026fcb4847549bf442d68633ca5a0afedc1fe"} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a31546b9e3a82930b19f2745a6dfe059b0d48dba1b476383ec94330d0290601b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a9947b6b66994d724145b352c1026fcb4847549bf442d68633ca5a0afedc1fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a9947b6b66994d724145b352c1026fcb4847549bf442d68633ca5a0afedc1fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a9947b6b66994d724145b352c1026fcb4847549bf442d68633ca5a0afedc1fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a31546b9e3a82930b19f2745a6dfe059b0d48dba1b476383ec94330d0290601b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a31546b9e3a82930b19f2745a6dfe059b0d48dba1b476383ec94330d0290601b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a9947b6b66994d724145b352c1026fcb4847549bf442d68633ca5a0afedc1fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a31546b9e3a82930b19f2745a6dfe059b0d48dba1b476383ec94330d0290601b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a31546b9e3a82930b19f2745a6dfe059b0d48dba1b476383ec94330d0290601b"} {"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a31546b9e3a82930b19f2745a6dfe059b0d48dba1b476383ec94330d0290601b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a31546b9e3a82930b19f2745a6dfe059b0d48dba1b476383ec94330d0290601b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a31546b9e3a82930b19f2745a6dfe059b0d48dba1b476383ec94330d0290601b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a31546b9e3a82930b19f2745a6dfe059b0d48dba1b476383ec94330d0290601b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a9947b6b66994d724145b352c1026fcb4847549bf442d68633ca5a0afedc1fe"} {"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6df22e3d850a34686af94a525fa2fe7085028b54df441b57854905ea82a8db8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6df22e3d850a34686af94a525fa2fe7085028b54df441b57854905ea82a8db8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9729c52dd4f9b2a891c56c6a46a0dd17f4117c84051d31abc267df2d5067d94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a31546b9e3a82930b19f2745a6dfe059b0d48dba1b476383ec94330d0290601b"} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9729c52dd4f9b2a891c56c6a46a0dd17f4117c84051d31abc267df2d5067d94","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6df22e3d850a34686af94a525fa2fe7085028b54df441b57854905ea82a8db8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6df22e3d850a34686af94a525fa2fe7085028b54df441b57854905ea82a8db8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c40d67fe130513f741c5700f76f8012305559823a975d5c2d5b5f3c354cd5569","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6df22e3d850a34686af94a525fa2fe7085028b54df441b57854905ea82a8db8"} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c40d67fe130513f741c5700f76f8012305559823a975d5c2d5b5f3c354cd5569","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9729c52dd4f9b2a891c56c6a46a0dd17f4117c84051d31abc267df2d5067d94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9729c52dd4f9b2a891c56c6a46a0dd17f4117c84051d31abc267df2d5067d94"} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9729c52dd4f9b2a891c56c6a46a0dd17f4117c84051d31abc267df2d5067d94","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6df22e3d850a34686af94a525fa2fe7085028b54df441b57854905ea82a8db8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6df22e3d850a34686af94a525fa2fe7085028b54df441b57854905ea82a8db8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6df22e3d850a34686af94a525fa2fe7085028b54df441b57854905ea82a8db8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c40d67fe130513f741c5700f76f8012305559823a975d5c2d5b5f3c354cd5569","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c40d67fe130513f741c5700f76f8012305559823a975d5c2d5b5f3c354cd5569"} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c40d67fe130513f741c5700f76f8012305559823a975d5c2d5b5f3c354cd5569","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9729c52dd4f9b2a891c56c6a46a0dd17f4117c84051d31abc267df2d5067d94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9729c52dd4f9b2a891c56c6a46a0dd17f4117c84051d31abc267df2d5067d94"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9729c52dd4f9b2a891c56c6a46a0dd17f4117c84051d31abc267df2d5067d94","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6df22e3d850a34686af94a525fa2fe7085028b54df441b57854905ea82a8db8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6df22e3d850a34686af94a525fa2fe7085028b54df441b57854905ea82a8db8"} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6df22e3d850a34686af94a525fa2fe7085028b54df441b57854905ea82a8db8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9729c52dd4f9b2a891c56c6a46a0dd17f4117c84051d31abc267df2d5067d94"} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c40d67fe130513f741c5700f76f8012305559823a975d5c2d5b5f3c354cd5569","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c40d67fe130513f741c5700f76f8012305559823a975d5c2d5b5f3c354cd5569"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c40d67fe130513f741c5700f76f8012305559823a975d5c2d5b5f3c354cd5569","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c730e02a475b98ed6bc9af212355438a97ee12afcaed22ab9585ba8df3f76f99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a"} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c730e02a475b98ed6bc9af212355438a97ee12afcaed22ab9585ba8df3f76f99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9729c52dd4f9b2a891c56c6a46a0dd17f4117c84051d31abc267df2d5067d94","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6df22e3d850a34686af94a525fa2fe7085028b54df441b57854905ea82a8db8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6df22e3d850a34686af94a525fa2fe7085028b54df441b57854905ea82a8db8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c40d67fe130513f741c5700f76f8012305559823a975d5c2d5b5f3c354cd5569"} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6df22e3d850a34686af94a525fa2fe7085028b54df441b57854905ea82a8db8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c40d67fe130513f741c5700f76f8012305559823a975d5c2d5b5f3c354cd5569","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c730e02a475b98ed6bc9af212355438a97ee12afcaed22ab9585ba8df3f76f99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c730e02a475b98ed6bc9af212355438a97ee12afcaed22ab9585ba8df3f76f99"} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c730e02a475b98ed6bc9af212355438a97ee12afcaed22ab9585ba8df3f76f99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6df22e3d850a34686af94a525fa2fe7085028b54df441b57854905ea82a8db8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6df22e3d850a34686af94a525fa2fe7085028b54df441b57854905ea82a8db8"} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6df22e3d850a34686af94a525fa2fe7085028b54df441b57854905ea82a8db8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4534a195de5c3aa08af2915176288157fbb8bda090707d02a5f39d21ac7d5177","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4534a195de5c3aa08af2915176288157fbb8bda090707d02a5f39d21ac7d5177","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2643094e62366febab2f330f794fb81325df3f72c155dd4a476645ec7e8413a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9729c52dd4f9b2a891c56c6a46a0dd17f4117c84051d31abc267df2d5067d94"} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2643094e62366febab2f330f794fb81325df3f72c155dd4a476645ec7e8413a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c730e02a475b98ed6bc9af212355438a97ee12afcaed22ab9585ba8df3f76f99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c730e02a475b98ed6bc9af212355438a97ee12afcaed22ab9585ba8df3f76f99"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a"} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c730e02a475b98ed6bc9af212355438a97ee12afcaed22ab9585ba8df3f76f99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ba07fd8b959add16591f284c3e9b9030166090aa09b8a3555860b1c161e1e38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ba07fd8b959add16591f284c3e9b9030166090aa09b8a3555860b1c161e1e38","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6df22e3d850a34686af94a525fa2fe7085028b54df441b57854905ea82a8db8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6df22e3d850a34686af94a525fa2fe7085028b54df441b57854905ea82a8db8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4534a195de5c3aa08af2915176288157fbb8bda090707d02a5f39d21ac7d5177"} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6df22e3d850a34686af94a525fa2fe7085028b54df441b57854905ea82a8db8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0962eeafe97c764e044a79521b3187f66fad1f04ce21060238c2079d1dee524","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2643094e62366febab2f330f794fb81325df3f72c155dd4a476645ec7e8413a2"} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0962eeafe97c764e044a79521b3187f66fad1f04ce21060238c2079d1dee524","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4534a195de5c3aa08af2915176288157fbb8bda090707d02a5f39d21ac7d5177","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4534a195de5c3aa08af2915176288157fbb8bda090707d02a5f39d21ac7d5177"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4534a195de5c3aa08af2915176288157fbb8bda090707d02a5f39d21ac7d5177","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55c0f701c4ef0436baa1d8475679dad6b31bfb4e6c378aea2212d9d2cd65bda4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c730e02a475b98ed6bc9af212355438a97ee12afcaed22ab9585ba8df3f76f99"} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55c0f701c4ef0436baa1d8475679dad6b31bfb4e6c378aea2212d9d2cd65bda4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2643094e62366febab2f330f794fb81325df3f72c155dd4a476645ec7e8413a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2643094e62366febab2f330f794fb81325df3f72c155dd4a476645ec7e8413a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ba07fd8b959add16591f284c3e9b9030166090aa09b8a3555860b1c161e1e38"} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2643094e62366febab2f330f794fb81325df3f72c155dd4a476645ec7e8413a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c730e02a475b98ed6bc9af212355438a97ee12afcaed22ab9585ba8df3f76f99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ba07fd8b959add16591f284c3e9b9030166090aa09b8a3555860b1c161e1e38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ba07fd8b959add16591f284c3e9b9030166090aa09b8a3555860b1c161e1e38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ba07fd8b959add16591f284c3e9b9030166090aa09b8a3555860b1c161e1e38","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7cfbff913aa42a298961f5120aa8c10976b752a785641c7b9f7f08e37a4f3f69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6df22e3d850a34686af94a525fa2fe7085028b54df441b57854905ea82a8db8"} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7cfbff913aa42a298961f5120aa8c10976b752a785641c7b9f7f08e37a4f3f69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0962eeafe97c764e044a79521b3187f66fad1f04ce21060238c2079d1dee524"} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55c0f701c4ef0436baa1d8475679dad6b31bfb4e6c378aea2212d9d2cd65bda4"} {"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6df22e3d850a34686af94a525fa2fe7085028b54df441b57854905ea82a8db8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7cfbff913aa42a298961f5120aa8c10976b752a785641c7b9f7f08e37a4f3f69"} {"level":"info","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91"} {"level":"info","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd"} {"level":"info","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0962eeafe97c764e044a79521b3187f66fad1f04ce21060238c2079d1dee524","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:55:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:55:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0962eeafe97c764e044a79521b3187f66fad1f04ce21060238c2079d1dee524"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/699b79155f94e91f3811643623db2e730cc23de73bff465248be455f8dd99cb4"} {"level":"info","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4534a195de5c3aa08af2915176288157fbb8bda090707d02a5f39d21ac7d5177"} {"level":"info","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0962eeafe97c764e044a79521b3187f66fad1f04ce21060238c2079d1dee524","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"699b79155f94e91f3811643623db2e730cc23de73bff465248be455f8dd99cb4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:55:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:55:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["699b79155f94e91f3811643623db2e730cc23de73bff465248be455f8dd99cb4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2643094e62366febab2f330f794fb81325df3f72c155dd4a476645ec7e8413a2"} {"level":"info","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ba07fd8b959add16591f284c3e9b9030166090aa09b8a3555860b1c161e1e38"} {"level":"info","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"699b79155f94e91f3811643623db2e730cc23de73bff465248be455f8dd99cb4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4534a195de5c3aa08af2915176288157fbb8bda090707d02a5f39d21ac7d5177","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55c0f701c4ef0436baa1d8475679dad6b31bfb4e6c378aea2212d9d2cd65bda4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:55:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:55:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55c0f701c4ef0436baa1d8475679dad6b31bfb4e6c378aea2212d9d2cd65bda4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06d7c597791e2ebfdbd34ce71b079cb74988fd13ce16b5a46c68799480e48ee9"} {"level":"info","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/570952ede61da6f56959f4f385f3b5e42c8bddcb516a267153c60ce53ecc8d90"} {"level":"info","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55490ac232d1cd11562c3e948514009e9a834967173199dca38618a5f30f6c57"} {"level":"info","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55c0f701c4ef0436baa1d8475679dad6b31bfb4e6c378aea2212d9d2cd65bda4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2643094e62366febab2f330f794fb81325df3f72c155dd4a476645ec7e8413a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ba07fd8b959add16591f284c3e9b9030166090aa09b8a3555860b1c161e1e38","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06d7c597791e2ebfdbd34ce71b079cb74988fd13ce16b5a46c68799480e48ee9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:55:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:55:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["06d7c597791e2ebfdbd34ce71b079cb74988fd13ce16b5a46c68799480e48ee9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd"} {"level":"info","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0962eeafe97c764e044a79521b3187f66fad1f04ce21060238c2079d1dee524"} {"level":"info","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06d7c597791e2ebfdbd34ce71b079cb74988fd13ce16b5a46c68799480e48ee9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7cfbff913aa42a298961f5120aa8c10976b752a785641c7b9f7f08e37a4f3f69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:55:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:55:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7cfbff913aa42a298961f5120aa8c10976b752a785641c7b9f7f08e37a4f3f69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/699b79155f94e91f3811643623db2e730cc23de73bff465248be455f8dd99cb4"} {"level":"info","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55c0f701c4ef0436baa1d8475679dad6b31bfb4e6c378aea2212d9d2cd65bda4"} {"level":"info","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06d7c597791e2ebfdbd34ce71b079cb74988fd13ce16b5a46c68799480e48ee9"} {"level":"info","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7cfbff913aa42a298961f5120aa8c10976b752a785641c7b9f7f08e37a4f3f69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"570952ede61da6f56959f4f385f3b5e42c8bddcb516a267153c60ce53ecc8d90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:55:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:55:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["570952ede61da6f56959f4f385f3b5e42c8bddcb516a267153c60ce53ecc8d90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7cfbff913aa42a298961f5120aa8c10976b752a785641c7b9f7f08e37a4f3f69"} {"level":"info","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"570952ede61da6f56959f4f385f3b5e42c8bddcb516a267153c60ce53ecc8d90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55490ac232d1cd11562c3e948514009e9a834967173199dca38618a5f30f6c57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:55:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:55:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55490ac232d1cd11562c3e948514009e9a834967173199dca38618a5f30f6c57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55490ac232d1cd11562c3e948514009e9a834967173199dca38618a5f30f6c57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:55:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:55:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/570952ede61da6f56959f4f385f3b5e42c8bddcb516a267153c60ce53ecc8d90"} {"level":"info","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55490ac232d1cd11562c3e948514009e9a834967173199dca38618a5f30f6c57"} {"level":"info","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:55:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:55:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91"} {"level":"info","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0962eeafe97c764e044a79521b3187f66fad1f04ce21060238c2079d1dee524","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"699b79155f94e91f3811643623db2e730cc23de73bff465248be455f8dd99cb4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55c0f701c4ef0436baa1d8475679dad6b31bfb4e6c378aea2212d9d2cd65bda4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06d7c597791e2ebfdbd34ce71b079cb74988fd13ce16b5a46c68799480e48ee9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7cfbff913aa42a298961f5120aa8c10976b752a785641c7b9f7f08e37a4f3f69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"570952ede61da6f56959f4f385f3b5e42c8bddcb516a267153c60ce53ecc8d90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55490ac232d1cd11562c3e948514009e9a834967173199dca38618a5f30f6c57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:55:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:55:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd"} {"level":"info","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:55:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:55:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd"} {"level":"info","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:55:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:55:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd"} {"level":"error","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T12:55:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"81f84dd7-251f-4a81-8d9d-d90e723b940b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:55610","PortSpecifier":{"PortValue":55610}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"81f84dd7-251f-4a81-8d9d-d90e723b940b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d45fc5.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T12:55:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"81f84dd7-251f-4a81-8d9d-d90e723b940b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:55610","PortSpecifier":{"PortValue":55610}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784811346,"nanos":930931761},"http":{"id":"81f84dd7-251f-4a81-8d9d-d90e723b940b","method":"POST","headers":{":authority":"e2e-shared-a-d45fc5.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T12:55:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"81f84dd7-251f-4a81-8d9d-d90e723b940b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T12:55:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"81f84dd7-251f-4a81-8d9d-d90e723b940b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"687ee252-a56c-49e3-84a4-23a94a9873c7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=30e8b036-3ed3-43e5-931c-4159ec0e5ea7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9e9814df6731"]}} {"level":"debug","ts":"2026-07-23T12:55:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"81f84dd7-251f-4a81-8d9d-d90e723b940b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9e9814df6731"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=30e8b036-3ed3-43e5-931c-4159ec0e5ea7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"687ee252-a56c-49e3-84a4-23a94a9873c7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9ba07fd8b959add16591f284c3e9b9030166090aa09b8a3555860b1c161e1e38"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d45fc5.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T12:55:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81f84dd7-251f-4a81-8d9d-d90e723b940b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:55:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81f84dd7-251f-4a81-8d9d-d90e723b940b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:55:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81f84dd7-251f-4a81-8d9d-d90e723b940b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d45fc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:55:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"81f84dd7-251f-4a81-8d9d-d90e723b940b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T12:55:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"81f84dd7-251f-4a81-8d9d-d90e723b940b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T12:55:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"81f84dd7-251f-4a81-8d9d-d90e723b940b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T12:55:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"81f84dd7-251f-4a81-8d9d-d90e723b940b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T12:55:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"81f84dd7-251f-4a81-8d9d-d90e723b940b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T12:55:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3b74140e-6165-46c2-bff4-de537434fdd8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:43094","PortSpecifier":{"PortValue":43094}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3b74140e-6165-46c2-bff4-de537434fdd8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-474ecb.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T12:55:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3b74140e-6165-46c2-bff4-de537434fdd8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:43094","PortSpecifier":{"PortValue":43094}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784811346,"nanos":979127879},"http":{"id":"3b74140e-6165-46c2-bff4-de537434fdd8","method":"POST","headers":{":authority":"e2e-shared-b-474ecb.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T12:55:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3b74140e-6165-46c2-bff4-de537434fdd8","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T12:55:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3b74140e-6165-46c2-bff4-de537434fdd8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"687ee252-a56c-49e3-84a4-23a94a9873c7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=30e8b036-3ed3-43e5-931c-4159ec0e5ea7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9e9814df6731"]}} {"level":"debug","ts":"2026-07-23T12:55:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3b74140e-6165-46c2-bff4-de537434fdd8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9e9814df6731"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=30e8b036-3ed3-43e5-931c-4159ec0e5ea7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"687ee252-a56c-49e3-84a4-23a94a9873c7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-474ecb.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T12:55:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b74140e-6165-46c2-bff4-de537434fdd8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:55:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b74140e-6165-46c2-bff4-de537434fdd8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:55:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b74140e-6165-46c2-bff4-de537434fdd8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-474ecb/rate-test-model-474ecb\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-474ecb/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:55:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3b74140e-6165-46c2-bff4-de537434fdd8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T12:55:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b74140e-6165-46c2-bff4-de537434fdd8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T12:55:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b74140e-6165-46c2-bff4-de537434fdd8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T12:55:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3b74140e-6165-46c2-bff4-de537434fdd8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T12:55:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3b74140e-6165-46c2-bff4-de537434fdd8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T12:55:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ff19891-3709-4ae1-9db2-0f51544009c6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:55616","PortSpecifier":{"PortValue":55616}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8ff19891-3709-4ae1-9db2-0f51544009c6","method":"POST","path":"/ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5/v1/completions","host":"e2e-shared-a-d45fc5.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T12:55:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ff19891-3709-4ae1-9db2-0f51544009c6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:55616","PortSpecifier":{"PortValue":55616}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784811347,"nanos":22445077},"http":{"id":"8ff19891-3709-4ae1-9db2-0f51544009c6","method":"POST","headers":{":authority":"e2e-shared-a-d45fc5.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T12:55:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8ff19891-3709-4ae1-9db2-0f51544009c6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6M6pgMOmN8Z7rwMv_AbikkeFCgUJ1oRV2t4COWSuctHBPmCFjYgJphe7QY9F"} {"level":"debug","ts":"2026-07-23T12:55:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8ff19891-3709-4ae1-9db2-0f51544009c6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d45fc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6M6pgMOmN8Z7rwMv_AbikkeFCgUJ1oRV2t4COWSuctHBPmCFjYgJphe7QY9F\"}"} {"level":"debug","ts":"2026-07-23T12:55:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8ff19891-3709-4ae1-9db2-0f51544009c6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d45fc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"defc7579-00ce-4867-8d0a-7dfe3915602c","keyName":"e2e-rate-a-9f1180","subscription":"e2e-rate-iso-a-9f1180","tenant":"e2e-shared-a-d45fc5","userId":"defc7579-00ce-4867-8d0a-7dfe3915602c","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T12:55:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8ff19891-3709-4ae1-9db2-0f51544009c6","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d45fc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5\",\"requestedSubscription\":\"e2e-rate-iso-a-9f1180\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T12:55:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8ff19891-3709-4ae1-9db2-0f51544009c6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d45fc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d45fc5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9f1180","namespace":"ai-tenant-e2e-shared-a-d45fc5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5"}} {"level":"debug","ts":"2026-07-23T12:55:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8ff19891-3709-4ae1-9db2-0f51544009c6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T12:55:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ff19891-3709-4ae1-9db2-0f51544009c6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:55:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ff19891-3709-4ae1-9db2-0f51544009c6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:55:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ff19891-3709-4ae1-9db2-0f51544009c6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:55:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ff19891-3709-4ae1-9db2-0f51544009c6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d45fc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:55:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ff19891-3709-4ae1-9db2-0f51544009c6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T12:55:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ff19891-3709-4ae1-9db2-0f51544009c6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9f1180"} {"level":"debug","ts":"2026-07-23T12:55:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ff19891-3709-4ae1-9db2-0f51544009c6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T12:55:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ff19891-3709-4ae1-9db2-0f51544009c6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"defc7579-00ce-4867-8d0a-7dfe3915602c","keyName":"e2e-rate-a-9f1180","selected_subscription":"e2e-rate-iso-a-9f1180","selected_subscription_key":"ai-tenant-e2e-shared-a-d45fc5/e2e-rate-iso-a-9f1180@ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d45fc5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9f1180","namespace":"ai-tenant-e2e-shared-a-d45fc5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T12:55:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ff19891-3709-4ae1-9db2-0f51544009c6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T12:55:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ff19891-3709-4ae1-9db2-0f51544009c6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T12:55:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a56ff107-d98f-4dfd-a0f5-b03cef64b1be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:55622","PortSpecifier":{"PortValue":55622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a56ff107-d98f-4dfd-a0f5-b03cef64b1be","method":"POST","path":"/ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5/v1/completions","host":"e2e-shared-a-d45fc5.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T12:55:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a56ff107-d98f-4dfd-a0f5-b03cef64b1be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:55622","PortSpecifier":{"PortValue":55622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784811348,"nanos":100037982},"http":{"id":"a56ff107-d98f-4dfd-a0f5-b03cef64b1be","method":"POST","headers":{":authority":"e2e-shared-a-d45fc5.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T12:55:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a56ff107-d98f-4dfd-a0f5-b03cef64b1be","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6M6pgMOmN8Z7rwMv_AbikkeFCgUJ1oRV2t4COWSuctHBPmCFjYgJphe7QY9F"} {"level":"debug","ts":"2026-07-23T12:55:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a56ff107-d98f-4dfd-a0f5-b03cef64b1be","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d45fc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6M6pgMOmN8Z7rwMv_AbikkeFCgUJ1oRV2t4COWSuctHBPmCFjYgJphe7QY9F\"}"} {"level":"debug","ts":"2026-07-23T12:55:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a56ff107-d98f-4dfd-a0f5-b03cef64b1be","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d45fc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"defc7579-00ce-4867-8d0a-7dfe3915602c","keyName":"e2e-rate-a-9f1180","subscription":"e2e-rate-iso-a-9f1180","tenant":"e2e-shared-a-d45fc5","userId":"defc7579-00ce-4867-8d0a-7dfe3915602c","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T12:55:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a56ff107-d98f-4dfd-a0f5-b03cef64b1be","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d45fc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5\",\"requestedSubscription\":\"e2e-rate-iso-a-9f1180\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T12:55:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a56ff107-d98f-4dfd-a0f5-b03cef64b1be","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d45fc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d45fc5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9f1180","namespace":"ai-tenant-e2e-shared-a-d45fc5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5"}} {"level":"debug","ts":"2026-07-23T12:55:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a56ff107-d98f-4dfd-a0f5-b03cef64b1be","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T12:55:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a56ff107-d98f-4dfd-a0f5-b03cef64b1be","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:55:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a56ff107-d98f-4dfd-a0f5-b03cef64b1be","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:55:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a56ff107-d98f-4dfd-a0f5-b03cef64b1be","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:55:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a56ff107-d98f-4dfd-a0f5-b03cef64b1be","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d45fc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:55:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a56ff107-d98f-4dfd-a0f5-b03cef64b1be","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T12:55:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a56ff107-d98f-4dfd-a0f5-b03cef64b1be","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9f1180"} {"level":"debug","ts":"2026-07-23T12:55:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a56ff107-d98f-4dfd-a0f5-b03cef64b1be","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T12:55:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a56ff107-d98f-4dfd-a0f5-b03cef64b1be","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"defc7579-00ce-4867-8d0a-7dfe3915602c","keyName":"e2e-rate-a-9f1180","selected_subscription":"e2e-rate-iso-a-9f1180","selected_subscription_key":"ai-tenant-e2e-shared-a-d45fc5/e2e-rate-iso-a-9f1180@ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d45fc5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9f1180","namespace":"ai-tenant-e2e-shared-a-d45fc5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T12:55:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a56ff107-d98f-4dfd-a0f5-b03cef64b1be","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T12:55:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a56ff107-d98f-4dfd-a0f5-b03cef64b1be","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T12:55:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e4355cbf-bb5a-4f6b-94fa-87383966dee7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:55634","PortSpecifier":{"PortValue":55634}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e4355cbf-bb5a-4f6b-94fa-87383966dee7","method":"POST","path":"/ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5/v1/completions","host":"e2e-shared-a-d45fc5.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T12:55:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e4355cbf-bb5a-4f6b-94fa-87383966dee7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:55634","PortSpecifier":{"PortValue":55634}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784811349,"nanos":135266229},"http":{"id":"e4355cbf-bb5a-4f6b-94fa-87383966dee7","method":"POST","headers":{":authority":"e2e-shared-a-d45fc5.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T12:55:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e4355cbf-bb5a-4f6b-94fa-87383966dee7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6M6pgMOmN8Z7rwMv_AbikkeFCgUJ1oRV2t4COWSuctHBPmCFjYgJphe7QY9F"} {"level":"debug","ts":"2026-07-23T12:55:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e4355cbf-bb5a-4f6b-94fa-87383966dee7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d45fc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6M6pgMOmN8Z7rwMv_AbikkeFCgUJ1oRV2t4COWSuctHBPmCFjYgJphe7QY9F\"}"} {"level":"debug","ts":"2026-07-23T12:55:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e4355cbf-bb5a-4f6b-94fa-87383966dee7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d45fc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"defc7579-00ce-4867-8d0a-7dfe3915602c","keyName":"e2e-rate-a-9f1180","subscription":"e2e-rate-iso-a-9f1180","tenant":"e2e-shared-a-d45fc5","userId":"defc7579-00ce-4867-8d0a-7dfe3915602c","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T12:55:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e4355cbf-bb5a-4f6b-94fa-87383966dee7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d45fc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5\",\"requestedSubscription\":\"e2e-rate-iso-a-9f1180\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T12:55:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e4355cbf-bb5a-4f6b-94fa-87383966dee7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d45fc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d45fc5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9f1180","namespace":"ai-tenant-e2e-shared-a-d45fc5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5"}} {"level":"debug","ts":"2026-07-23T12:55:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e4355cbf-bb5a-4f6b-94fa-87383966dee7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T12:55:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4355cbf-bb5a-4f6b-94fa-87383966dee7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:55:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4355cbf-bb5a-4f6b-94fa-87383966dee7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:55:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4355cbf-bb5a-4f6b-94fa-87383966dee7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d45fc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:55:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4355cbf-bb5a-4f6b-94fa-87383966dee7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:55:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4355cbf-bb5a-4f6b-94fa-87383966dee7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T12:55:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4355cbf-bb5a-4f6b-94fa-87383966dee7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9f1180"} {"level":"debug","ts":"2026-07-23T12:55:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4355cbf-bb5a-4f6b-94fa-87383966dee7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T12:55:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4355cbf-bb5a-4f6b-94fa-87383966dee7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"defc7579-00ce-4867-8d0a-7dfe3915602c","keyName":"e2e-rate-a-9f1180","selected_subscription":"e2e-rate-iso-a-9f1180","selected_subscription_key":"ai-tenant-e2e-shared-a-d45fc5/e2e-rate-iso-a-9f1180@ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d45fc5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9f1180","namespace":"ai-tenant-e2e-shared-a-d45fc5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T12:55:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e4355cbf-bb5a-4f6b-94fa-87383966dee7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T12:55:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e4355cbf-bb5a-4f6b-94fa-87383966dee7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ac285529-edfa-4ef1-8f4f-c424150d8312","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:46642","PortSpecifier":{"PortValue":46642}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ac285529-edfa-4ef1-8f4f-c424150d8312","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d45fc5.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ac285529-edfa-4ef1-8f4f-c424150d8312","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:46642","PortSpecifier":{"PortValue":46642}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784811360,"nanos":54087609},"http":{"id":"ac285529-edfa-4ef1-8f4f-c424150d8312","method":"POST","headers":{":authority":"e2e-shared-a-d45fc5.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ac285529-edfa-4ef1-8f4f-c424150d8312","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ac285529-edfa-4ef1-8f4f-c424150d8312","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"687ee252-a56c-49e3-84a4-23a94a9873c7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=30e8b036-3ed3-43e5-931c-4159ec0e5ea7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9e9814df6731"]}} {"level":"debug","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ac285529-edfa-4ef1-8f4f-c424150d8312","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9e9814df6731"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=30e8b036-3ed3-43e5-931c-4159ec0e5ea7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"687ee252-a56c-49e3-84a4-23a94a9873c7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9ba07fd8b959add16591f284c3e9b9030166090aa09b8a3555860b1c161e1e38"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d45fc5.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ac285529-edfa-4ef1-8f4f-c424150d8312","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ac285529-edfa-4ef1-8f4f-c424150d8312","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ac285529-edfa-4ef1-8f4f-c424150d8312","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d45fc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ac285529-edfa-4ef1-8f4f-c424150d8312","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ac285529-edfa-4ef1-8f4f-c424150d8312","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ac285529-edfa-4ef1-8f4f-c424150d8312","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ac285529-edfa-4ef1-8f4f-c424150d8312","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ac285529-edfa-4ef1-8f4f-c424150d8312","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"09dc9d2a-6cee-4166-a020-9a94e789a6c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:53268","PortSpecifier":{"PortValue":53268}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"09dc9d2a-6cee-4166-a020-9a94e789a6c7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-474ecb.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"09dc9d2a-6cee-4166-a020-9a94e789a6c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:53268","PortSpecifier":{"PortValue":53268}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784811360,"nanos":96822370},"http":{"id":"09dc9d2a-6cee-4166-a020-9a94e789a6c7","method":"POST","headers":{":authority":"e2e-shared-b-474ecb.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"09dc9d2a-6cee-4166-a020-9a94e789a6c7","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"09dc9d2a-6cee-4166-a020-9a94e789a6c7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"687ee252-a56c-49e3-84a4-23a94a9873c7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=30e8b036-3ed3-43e5-931c-4159ec0e5ea7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9e9814df6731"]}} {"level":"debug","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"09dc9d2a-6cee-4166-a020-9a94e789a6c7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9e9814df6731"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=30e8b036-3ed3-43e5-931c-4159ec0e5ea7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"687ee252-a56c-49e3-84a4-23a94a9873c7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-474ecb.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09dc9d2a-6cee-4166-a020-9a94e789a6c7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09dc9d2a-6cee-4166-a020-9a94e789a6c7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09dc9d2a-6cee-4166-a020-9a94e789a6c7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-474ecb/rate-test-model-474ecb\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-474ecb/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"09dc9d2a-6cee-4166-a020-9a94e789a6c7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09dc9d2a-6cee-4166-a020-9a94e789a6c7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09dc9d2a-6cee-4166-a020-9a94e789a6c7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"09dc9d2a-6cee-4166-a020-9a94e789a6c7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"09dc9d2a-6cee-4166-a020-9a94e789a6c7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"039d8d4f-69e1-4df8-b240-47e23336520c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:46644","PortSpecifier":{"PortValue":46644}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"039d8d4f-69e1-4df8-b240-47e23336520c","method":"POST","path":"/ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5/v1/completions","host":"e2e-shared-a-d45fc5.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"039d8d4f-69e1-4df8-b240-47e23336520c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:46644","PortSpecifier":{"PortValue":46644}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784811360,"nanos":141108620},"http":{"id":"039d8d4f-69e1-4df8-b240-47e23336520c","method":"POST","headers":{":authority":"e2e-shared-a-d45fc5.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"039d8d4f-69e1-4df8-b240-47e23336520c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ZyCSjpYHfwmgtVY9_i7XJ3r03tWxYcLYo8KO14IqOZBFqyl3anPbmbwUOgFK"} {"level":"debug","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"039d8d4f-69e1-4df8-b240-47e23336520c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d45fc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ZyCSjpYHfwmgtVY9_i7XJ3r03tWxYcLYo8KO14IqOZBFqyl3anPbmbwUOgFK\"}"} {"level":"debug","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"039d8d4f-69e1-4df8-b240-47e23336520c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d45fc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3a5b2d68-e9f4-4e71-9764-5c7950907cb1","keyName":"e2e-rate-a-890b60","subscription":"e2e-rate-iso-a-890b60","tenant":"e2e-shared-a-d45fc5","userId":"3a5b2d68-e9f4-4e71-9764-5c7950907cb1","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"039d8d4f-69e1-4df8-b240-47e23336520c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d45fc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5\",\"requestedSubscription\":\"e2e-rate-iso-a-890b60\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"039d8d4f-69e1-4df8-b240-47e23336520c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d45fc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d45fc5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-890b60","namespace":"ai-tenant-e2e-shared-a-d45fc5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5"}} {"level":"debug","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"039d8d4f-69e1-4df8-b240-47e23336520c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"039d8d4f-69e1-4df8-b240-47e23336520c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"039d8d4f-69e1-4df8-b240-47e23336520c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"039d8d4f-69e1-4df8-b240-47e23336520c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d45fc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"039d8d4f-69e1-4df8-b240-47e23336520c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"039d8d4f-69e1-4df8-b240-47e23336520c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-890b60"} {"level":"debug","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"039d8d4f-69e1-4df8-b240-47e23336520c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"039d8d4f-69e1-4df8-b240-47e23336520c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"039d8d4f-69e1-4df8-b240-47e23336520c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3a5b2d68-e9f4-4e71-9764-5c7950907cb1","keyName":"e2e-rate-a-890b60","selected_subscription":"e2e-rate-iso-a-890b60","selected_subscription_key":"ai-tenant-e2e-shared-a-d45fc5/e2e-rate-iso-a-890b60@ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d45fc5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-890b60","namespace":"ai-tenant-e2e-shared-a-d45fc5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"039d8d4f-69e1-4df8-b240-47e23336520c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"039d8d4f-69e1-4df8-b240-47e23336520c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T12:56:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"021f1d19-6c7f-4c2e-a644-cd7a5d4964b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:46656","PortSpecifier":{"PortValue":46656}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"021f1d19-6c7f-4c2e-a644-cd7a5d4964b9","method":"POST","path":"/ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5/v1/completions","host":"e2e-shared-a-d45fc5.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T12:56:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"021f1d19-6c7f-4c2e-a644-cd7a5d4964b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:46656","PortSpecifier":{"PortValue":46656}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784811361,"nanos":182067633},"http":{"id":"021f1d19-6c7f-4c2e-a644-cd7a5d4964b9","method":"POST","headers":{":authority":"e2e-shared-a-d45fc5.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T12:56:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"021f1d19-6c7f-4c2e-a644-cd7a5d4964b9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ZyCSjpYHfwmgtVY9_i7XJ3r03tWxYcLYo8KO14IqOZBFqyl3anPbmbwUOgFK"} {"level":"debug","ts":"2026-07-23T12:56:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"021f1d19-6c7f-4c2e-a644-cd7a5d4964b9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d45fc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ZyCSjpYHfwmgtVY9_i7XJ3r03tWxYcLYo8KO14IqOZBFqyl3anPbmbwUOgFK\"}"} {"level":"debug","ts":"2026-07-23T12:56:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"021f1d19-6c7f-4c2e-a644-cd7a5d4964b9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d45fc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3a5b2d68-e9f4-4e71-9764-5c7950907cb1","keyName":"e2e-rate-a-890b60","subscription":"e2e-rate-iso-a-890b60","tenant":"e2e-shared-a-d45fc5","userId":"3a5b2d68-e9f4-4e71-9764-5c7950907cb1","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T12:56:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"021f1d19-6c7f-4c2e-a644-cd7a5d4964b9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d45fc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5\",\"requestedSubscription\":\"e2e-rate-iso-a-890b60\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T12:56:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"021f1d19-6c7f-4c2e-a644-cd7a5d4964b9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d45fc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d45fc5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-890b60","namespace":"ai-tenant-e2e-shared-a-d45fc5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5"}} {"level":"debug","ts":"2026-07-23T12:56:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"021f1d19-6c7f-4c2e-a644-cd7a5d4964b9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T12:56:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"021f1d19-6c7f-4c2e-a644-cd7a5d4964b9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:56:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"021f1d19-6c7f-4c2e-a644-cd7a5d4964b9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:56:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"021f1d19-6c7f-4c2e-a644-cd7a5d4964b9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d45fc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:56:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"021f1d19-6c7f-4c2e-a644-cd7a5d4964b9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:56:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"021f1d19-6c7f-4c2e-a644-cd7a5d4964b9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T12:56:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"021f1d19-6c7f-4c2e-a644-cd7a5d4964b9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-890b60"} {"level":"debug","ts":"2026-07-23T12:56:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"021f1d19-6c7f-4c2e-a644-cd7a5d4964b9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T12:56:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"021f1d19-6c7f-4c2e-a644-cd7a5d4964b9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3a5b2d68-e9f4-4e71-9764-5c7950907cb1","keyName":"e2e-rate-a-890b60","selected_subscription":"e2e-rate-iso-a-890b60","selected_subscription_key":"ai-tenant-e2e-shared-a-d45fc5/e2e-rate-iso-a-890b60@ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d45fc5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-890b60","namespace":"ai-tenant-e2e-shared-a-d45fc5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T12:56:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"021f1d19-6c7f-4c2e-a644-cd7a5d4964b9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T12:56:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"021f1d19-6c7f-4c2e-a644-cd7a5d4964b9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T12:56:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"50184840-2fc3-46d4-ae49-1229211c8a2a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:46672","PortSpecifier":{"PortValue":46672}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"50184840-2fc3-46d4-ae49-1229211c8a2a","method":"POST","path":"/ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5/v1/completions","host":"e2e-shared-a-d45fc5.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T12:56:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"50184840-2fc3-46d4-ae49-1229211c8a2a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:46672","PortSpecifier":{"PortValue":46672}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784811362,"nanos":221181313},"http":{"id":"50184840-2fc3-46d4-ae49-1229211c8a2a","method":"POST","headers":{":authority":"e2e-shared-a-d45fc5.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T12:56:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"50184840-2fc3-46d4-ae49-1229211c8a2a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ZyCSjpYHfwmgtVY9_i7XJ3r03tWxYcLYo8KO14IqOZBFqyl3anPbmbwUOgFK"} {"level":"debug","ts":"2026-07-23T12:56:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"50184840-2fc3-46d4-ae49-1229211c8a2a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d45fc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ZyCSjpYHfwmgtVY9_i7XJ3r03tWxYcLYo8KO14IqOZBFqyl3anPbmbwUOgFK\"}"} {"level":"debug","ts":"2026-07-23T12:56:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"50184840-2fc3-46d4-ae49-1229211c8a2a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d45fc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3a5b2d68-e9f4-4e71-9764-5c7950907cb1","keyName":"e2e-rate-a-890b60","subscription":"e2e-rate-iso-a-890b60","tenant":"e2e-shared-a-d45fc5","userId":"3a5b2d68-e9f4-4e71-9764-5c7950907cb1","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T12:56:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"50184840-2fc3-46d4-ae49-1229211c8a2a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d45fc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5\",\"requestedSubscription\":\"e2e-rate-iso-a-890b60\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T12:56:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"50184840-2fc3-46d4-ae49-1229211c8a2a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d45fc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d45fc5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-890b60","namespace":"ai-tenant-e2e-shared-a-d45fc5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5"}} {"level":"debug","ts":"2026-07-23T12:56:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"50184840-2fc3-46d4-ae49-1229211c8a2a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T12:56:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50184840-2fc3-46d4-ae49-1229211c8a2a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:56:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50184840-2fc3-46d4-ae49-1229211c8a2a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:56:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50184840-2fc3-46d4-ae49-1229211c8a2a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:56:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50184840-2fc3-46d4-ae49-1229211c8a2a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d45fc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:56:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50184840-2fc3-46d4-ae49-1229211c8a2a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T12:56:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50184840-2fc3-46d4-ae49-1229211c8a2a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-890b60"} {"level":"debug","ts":"2026-07-23T12:56:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50184840-2fc3-46d4-ae49-1229211c8a2a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T12:56:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50184840-2fc3-46d4-ae49-1229211c8a2a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3a5b2d68-e9f4-4e71-9764-5c7950907cb1","keyName":"e2e-rate-a-890b60","selected_subscription":"e2e-rate-iso-a-890b60","selected_subscription_key":"ai-tenant-e2e-shared-a-d45fc5/e2e-rate-iso-a-890b60@ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d45fc5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-890b60","namespace":"ai-tenant-e2e-shared-a-d45fc5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T12:56:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"50184840-2fc3-46d4-ae49-1229211c8a2a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T12:56:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"50184840-2fc3-46d4-ae49-1229211c8a2a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T12:56:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fc734404-b084-4be7-b73e-075e49697274","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:53270","PortSpecifier":{"PortValue":53270}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fc734404-b084-4be7-b73e-075e49697274","method":"POST","path":"/ai-tenant-e2e-shared-b-474ecb/rate-test-model-474ecb/v1/completions","host":"e2e-shared-b-474ecb.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T12:56:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fc734404-b084-4be7-b73e-075e49697274","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:53270","PortSpecifier":{"PortValue":53270}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784811362,"nanos":259095186},"http":{"id":"fc734404-b084-4be7-b73e-075e49697274","method":"POST","headers":{":authority":"e2e-shared-b-474ecb.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-474ecb/rate-test-model-474ecb/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T12:56:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fc734404-b084-4be7-b73e-075e49697274","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1cPwDITFR7ppwnkZp_xhPuVInEJiukgV8tZ5H0Pw7KCxLuvVIHMCvxICuV0N0"} {"level":"debug","ts":"2026-07-23T12:56:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fc734404-b084-4be7-b73e-075e49697274","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-474ecb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1cPwDITFR7ppwnkZp_xhPuVInEJiukgV8tZ5H0Pw7KCxLuvVIHMCvxICuV0N0\"}"} {"level":"debug","ts":"2026-07-23T12:56:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fc734404-b084-4be7-b73e-075e49697274","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-474ecb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6d229499-4140-482a-ac75-a82d4775d0d8","keyName":"e2e-rate-b-890b60","subscription":"e2e-rate-iso-b-890b60","tenant":"e2e-shared-b-474ecb","userId":"6d229499-4140-482a-ac75-a82d4775d0d8","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T12:56:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fc734404-b084-4be7-b73e-075e49697274","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-474ecb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-474ecb/rate-test-model-474ecb\",\"requestedSubscription\":\"e2e-rate-iso-b-890b60\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T12:56:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fc734404-b084-4be7-b73e-075e49697274","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-474ecb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-474ecb","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-890b60","namespace":"ai-tenant-e2e-shared-b-474ecb","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-474ecb/rate-test-model-474ecb"}} {"level":"debug","ts":"2026-07-23T12:56:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fc734404-b084-4be7-b73e-075e49697274","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T12:56:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc734404-b084-4be7-b73e-075e49697274","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:56:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc734404-b084-4be7-b73e-075e49697274","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:56:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc734404-b084-4be7-b73e-075e49697274","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-474ecb/rate-test-model-474ecb\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-474ecb/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:56:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc734404-b084-4be7-b73e-075e49697274","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T12:56:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc734404-b084-4be7-b73e-075e49697274","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T12:56:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc734404-b084-4be7-b73e-075e49697274","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T12:56:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc734404-b084-4be7-b73e-075e49697274","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-890b60"} {"level":"debug","ts":"2026-07-23T12:56:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc734404-b084-4be7-b73e-075e49697274","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6d229499-4140-482a-ac75-a82d4775d0d8","keyName":"e2e-rate-b-890b60","selected_subscription":"e2e-rate-iso-b-890b60","selected_subscription_key":"ai-tenant-e2e-shared-b-474ecb/e2e-rate-iso-b-890b60@ai-tenant-e2e-shared-b-474ecb/rate-test-model-474ecb","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-474ecb","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-890b60","namespace":"ai-tenant-e2e-shared-b-474ecb","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-474ecb/rate-test-model-474ecb"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T12:56:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fc734404-b084-4be7-b73e-075e49697274","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T12:56:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fc734404-b084-4be7-b73e-075e49697274","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T12:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a0962eeafe97c764e044a79521b3187f66fad1f04ce21060238c2079d1dee524"} {"level":"info","ts":"2026-07-23T12:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d9729c52dd4f9b2a891c56c6a46a0dd17f4117c84051d31abc267df2d5067d94"} {"level":"info","ts":"2026-07-23T12:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a"} {"level":"info","ts":"2026-07-23T12:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c40d67fe130513f741c5700f76f8012305559823a975d5c2d5b5f3c354cd5569"} {"level":"info","ts":"2026-07-23T12:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd"} {"level":"info","ts":"2026-07-23T12:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4534a195de5c3aa08af2915176288157fbb8bda090707d02a5f39d21ac7d5177"} {"level":"info","ts":"2026-07-23T12:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a317fe8cbf91b0c597eff9514a9d94da5abfd00446fc6a76bfda0dfec80c2d4"} {"level":"info","ts":"2026-07-23T12:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/06d7c597791e2ebfdbd34ce71b079cb74988fd13ce16b5a46c68799480e48ee9"} {"level":"info","ts":"2026-07-23T12:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a9947b6b66994d724145b352c1026fcb4847549bf442d68633ca5a0afedc1fe"} {"level":"info","ts":"2026-07-23T12:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c730e02a475b98ed6bc9af212355438a97ee12afcaed22ab9585ba8df3f76f99"} {"level":"info","ts":"2026-07-23T12:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/699b79155f94e91f3811643623db2e730cc23de73bff465248be455f8dd99cb4"} {"level":"info","ts":"2026-07-23T12:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/89b708725cbd515d98fe22a4abd83d809092938cb968ea45af8ccf30eadc04fe"} {"level":"info","ts":"2026-07-23T12:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/76e7653f9ec1bdcd2876cd5d2f51c8027c95d9792740c64cf69e22ef1847cc76"} {"level":"info","ts":"2026-07-23T12:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294"} {"level":"info","ts":"2026-07-23T12:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/570952ede61da6f56959f4f385f3b5e42c8bddcb516a267153c60ce53ecc8d90"} {"level":"info","ts":"2026-07-23T12:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c6df22e3d850a34686af94a525fa2fe7085028b54df441b57854905ea82a8db8"} {"level":"info","ts":"2026-07-23T12:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/55c0f701c4ef0436baa1d8475679dad6b31bfb4e6c378aea2212d9d2cd65bda4"} {"level":"info","ts":"2026-07-23T12:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a31546b9e3a82930b19f2745a6dfe059b0d48dba1b476383ec94330d0290601b"} {"level":"info","ts":"2026-07-23T12:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7cfbff913aa42a298961f5120aa8c10976b752a785641c7b9f7f08e37a4f3f69"} {"level":"info","ts":"2026-07-23T12:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/722cce07722ade81119764e03241fe830de4838b2c32a33ad793765102d5430d"} {"level":"info","ts":"2026-07-23T12:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91"} {"level":"info","ts":"2026-07-23T12:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/55490ac232d1cd11562c3e948514009e9a834967173199dca38618a5f30f6c57"} {"level":"info","ts":"2026-07-23T12:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9ba07fd8b959add16591f284c3e9b9030166090aa09b8a3555860b1c161e1e38"} {"level":"info","ts":"2026-07-23T12:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2643094e62366febab2f330f794fb81325df3f72c155dd4a476645ec7e8413a2"}