--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"error","ts":"2026-07-24T16:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c4a93c8f558ebb54718e3f05f9f2636e68f61bdf1314f4bf943d1a0b6934e89d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c4a93c8f558ebb54718e3f05f9f2636e68f61bdf1314f4bf943d1a0b6934e89d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T16:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4a93c8f558ebb54718e3f05f9f2636e68f61bdf1314f4bf943d1a0b6934e89d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:49:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:49:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4a93c8f558ebb54718e3f05f9f2636e68f61bdf1314f4bf943d1a0b6934e89d"} {"level":"info","ts":"2026-07-24T16:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4a93c8f558ebb54718e3f05f9f2636e68f61bdf1314f4bf943d1a0b6934e89d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:49:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:49:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4a93c8f558ebb54718e3f05f9f2636e68f61bdf1314f4bf943d1a0b6934e89d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b05c087b30ce5ea4a274b443fda9718d851d359e4b61cd6b7e59fa98fbc5239","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:49:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:49:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4a93c8f558ebb54718e3f05f9f2636e68f61bdf1314f4bf943d1a0b6934e89d"} {"level":"info","ts":"2026-07-24T16:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b05c087b30ce5ea4a274b443fda9718d851d359e4b61cd6b7e59fa98fbc5239","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:49:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:49:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b05c087b30ce5ea4a274b443fda9718d851d359e4b61cd6b7e59fa98fbc5239"} {"level":"info","ts":"2026-07-24T16:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b05c087b30ce5ea4a274b443fda9718d851d359e4b61cd6b7e59fa98fbc5239","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:49:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:49:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b05c087b30ce5ea4a274b443fda9718d851d359e4b61cd6b7e59fa98fbc5239"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b05c087b30ce5ea4a274b443fda9718d851d359e4b61cd6b7e59fa98fbc5239","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4a93c8f558ebb54718e3f05f9f2636e68f61bdf1314f4bf943d1a0b6934e89d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:49:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:49:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4a93c8f558ebb54718e3f05f9f2636e68f61bdf1314f4bf943d1a0b6934e89d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455"} {"level":"info","ts":"2026-07-24T16:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4a93c8f558ebb54718e3f05f9f2636e68f61bdf1314f4bf943d1a0b6934e89d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b05c087b30ce5ea4a274b443fda9718d851d359e4b61cd6b7e59fa98fbc5239","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4a93c8f558ebb54718e3f05f9f2636e68f61bdf1314f4bf943d1a0b6934e89d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:49:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:49:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4a93c8f558ebb54718e3f05f9f2636e68f61bdf1314f4bf943d1a0b6934e89d"} {"level":"info","ts":"2026-07-24T16:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4a93c8f558ebb54718e3f05f9f2636e68f61bdf1314f4bf943d1a0b6934e89d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:49:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:49:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593"} {"level":"info","ts":"2026-07-24T16:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4a93c8f558ebb54718e3f05f9f2636e68f61bdf1314f4bf943d1a0b6934e89d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:49:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:49:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4a93c8f558ebb54718e3f05f9f2636e68f61bdf1314f4bf943d1a0b6934e89d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4a93c8f558ebb54718e3f05f9f2636e68f61bdf1314f4bf943d1a0b6934e89d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:49:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:49:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b05c087b30ce5ea4a274b443fda9718d851d359e4b61cd6b7e59fa98fbc5239"} {"level":"info","ts":"2026-07-24T16:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4a93c8f558ebb54718e3f05f9f2636e68f61bdf1314f4bf943d1a0b6934e89d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:49:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:49:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4a93c8f558ebb54718e3f05f9f2636e68f61bdf1314f4bf943d1a0b6934e89d"} {"level":"info","ts":"2026-07-24T16:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4a93c8f558ebb54718e3f05f9f2636e68f61bdf1314f4bf943d1a0b6934e89d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6891af388060c48d81654a0e31b2aef8be7074c05389c891eaebb5b661e58be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:49:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:49:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6891af388060c48d81654a0e31b2aef8be7074c05389c891eaebb5b661e58be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:49:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:49:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593"} {"level":"info","ts":"2026-07-24T16:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6891af388060c48d81654a0e31b2aef8be7074c05389c891eaebb5b661e58be"} {"level":"info","ts":"2026-07-24T16:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4a93c8f558ebb54718e3f05f9f2636e68f61bdf1314f4bf943d1a0b6934e89d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6891af388060c48d81654a0e31b2aef8be7074c05389c891eaebb5b661e58be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:49:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:49:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6891af388060c48d81654a0e31b2aef8be7074c05389c891eaebb5b661e58be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4a93c8f558ebb54718e3f05f9f2636e68f61bdf1314f4bf943d1a0b6934e89d"} {"level":"info","ts":"2026-07-24T16:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6891af388060c48d81654a0e31b2aef8be7074c05389c891eaebb5b661e58be"} {"level":"info","ts":"2026-07-24T16:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6891af388060c48d81654a0e31b2aef8be7074c05389c891eaebb5b661e58be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4a93c8f558ebb54718e3f05f9f2636e68f61bdf1314f4bf943d1a0b6934e89d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:49:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:49:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4a93c8f558ebb54718e3f05f9f2636e68f61bdf1314f4bf943d1a0b6934e89d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593"} {"level":"info","ts":"2026-07-24T16:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d98f12a38bd4d0505b7d20d7d53007df84e486b75ac6103856511a753274c4aa"} {"level":"info","ts":"2026-07-24T16:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4a93c8f558ebb54718e3f05f9f2636e68f61bdf1314f4bf943d1a0b6934e89d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d98f12a38bd4d0505b7d20d7d53007df84e486b75ac6103856511a753274c4aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:49:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:49:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d98f12a38bd4d0505b7d20d7d53007df84e486b75ac6103856511a753274c4aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6891af388060c48d81654a0e31b2aef8be7074c05389c891eaebb5b661e58be"} {"level":"info","ts":"2026-07-24T16:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d98f12a38bd4d0505b7d20d7d53007df84e486b75ac6103856511a753274c4aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6891af388060c48d81654a0e31b2aef8be7074c05389c891eaebb5b661e58be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:49:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:49:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4a93c8f558ebb54718e3f05f9f2636e68f61bdf1314f4bf943d1a0b6934e89d"} {"level":"info","ts":"2026-07-24T16:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d98f12a38bd4d0505b7d20d7d53007df84e486b75ac6103856511a753274c4aa"} {"level":"info","ts":"2026-07-24T16:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4a93c8f558ebb54718e3f05f9f2636e68f61bdf1314f4bf943d1a0b6934e89d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d98f12a38bd4d0505b7d20d7d53007df84e486b75ac6103856511a753274c4aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:49:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:49:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593"} {"level":"info","ts":"2026-07-24T16:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593"} {"level":"debug","ts":"2026-07-24T16:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:49:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:49:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:49:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593"} {"level":"info","ts":"2026-07-24T16:49:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9109d5a7-edf5-45bc-9d71-955fc6c5514c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:49364","PortSpecifier":{"PortValue":49364}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9109d5a7-edf5-45bc-9d71-955fc6c5514c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a65dee.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T16:49:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9109d5a7-edf5-45bc-9d71-955fc6c5514c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:49364","PortSpecifier":{"PortValue":49364}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784911752,"nanos":498457954},"http":{"id":"9109d5a7-edf5-45bc-9d71-955fc6c5514c","method":"POST","headers":{":authority":"e2e-shared-a-a65dee.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T16:49:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9109d5a7-edf5-45bc-9d71-955fc6c5514c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T16:49:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9109d5a7-edf5-45bc-9d71-955fc6c5514c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c6920799-9c3c-48b3-a3e6-1c1556efc9c4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=515021ea-127d-4968-9b2f-4957a9e43ba5"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cf20df43e4ca"]}} {"level":"debug","ts":"2026-07-24T16:49:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9109d5a7-edf5-45bc-9d71-955fc6c5514c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cf20df43e4ca"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=515021ea-127d-4968-9b2f-4957a9e43ba5"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c6920799-9c3c-48b3-a3e6-1c1556efc9c4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c149b09b5b073bc00127c50664a04d6254286b8a8aa6d04b02836fb739c7fca2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.74:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a65dee.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T16:49:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9109d5a7-edf5-45bc-9d71-955fc6c5514c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:49:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9109d5a7-edf5-45bc-9d71-955fc6c5514c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:49:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9109d5a7-edf5-45bc-9d71-955fc6c5514c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a65dee/auth-test-model-a65dee\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a65dee/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:49:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9109d5a7-edf5-45bc-9d71-955fc6c5514c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T16:49:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9109d5a7-edf5-45bc-9d71-955fc6c5514c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T16:49:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9109d5a7-edf5-45bc-9d71-955fc6c5514c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-24T16:49:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9109d5a7-edf5-45bc-9d71-955fc6c5514c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T16:49:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9109d5a7-edf5-45bc-9d71-955fc6c5514c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T16:49:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"60c75df1-db67-4f54-b5cc-e5f11f4b9c80","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:43554","PortSpecifier":{"PortValue":43554}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"60c75df1-db67-4f54-b5cc-e5f11f4b9c80","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a29da6.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T16:49:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"60c75df1-db67-4f54-b5cc-e5f11f4b9c80","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:43554","PortSpecifier":{"PortValue":43554}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784911752,"nanos":536568551},"http":{"id":"60c75df1-db67-4f54-b5cc-e5f11f4b9c80","method":"POST","headers":{":authority":"e2e-shared-b-a29da6.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T16:49:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"60c75df1-db67-4f54-b5cc-e5f11f4b9c80","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T16:49:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"60c75df1-db67-4f54-b5cc-e5f11f4b9c80","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c6920799-9c3c-48b3-a3e6-1c1556efc9c4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=515021ea-127d-4968-9b2f-4957a9e43ba5"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cf20df43e4ca"]}} {"level":"debug","ts":"2026-07-24T16:49:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"60c75df1-db67-4f54-b5cc-e5f11f4b9c80","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cf20df43e4ca"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=515021ea-127d-4968-9b2f-4957a9e43ba5"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c6920799-9c3c-48b3-a3e6-1c1556efc9c4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0859bd43ff0f301a33f8370a4dcf63821f0f9dd8b97c20e1723b59edc332fe5d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a29da6.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T16:49:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60c75df1-db67-4f54-b5cc-e5f11f4b9c80","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:49:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60c75df1-db67-4f54-b5cc-e5f11f4b9c80","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:49:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60c75df1-db67-4f54-b5cc-e5f11f4b9c80","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a29da6/auth-test-model-a29da6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a29da6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:49:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"60c75df1-db67-4f54-b5cc-e5f11f4b9c80","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T16:49:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"60c75df1-db67-4f54-b5cc-e5f11f4b9c80","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T16:49:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"60c75df1-db67-4f54-b5cc-e5f11f4b9c80","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-24T16:49:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"60c75df1-db67-4f54-b5cc-e5f11f4b9c80","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T16:49:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"60c75df1-db67-4f54-b5cc-e5f11f4b9c80","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T16:49:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d4dc449c-4dc1-4c36-a98e-52bff753f68c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:43566","PortSpecifier":{"PortValue":43566}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d4dc449c-4dc1-4c36-a98e-52bff753f68c","method":"GET","path":"/maas-api/v1/api-keys/e5404f95-93fd-4bf4-af98-269ecaf50733","host":"e2e-shared-b-a29da6.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T16:49:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d4dc449c-4dc1-4c36-a98e-52bff753f68c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:43566","PortSpecifier":{"PortValue":43566}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784911752,"nanos":574069763},"http":{"id":"d4dc449c-4dc1-4c36-a98e-52bff753f68c","method":"GET","headers":{":authority":"e2e-shared-b-a29da6.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e5404f95-93fd-4bf4-af98-269ecaf50733",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T16:49:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d4dc449c-4dc1-4c36-a98e-52bff753f68c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T16:49:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d4dc449c-4dc1-4c36-a98e-52bff753f68c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c6920799-9c3c-48b3-a3e6-1c1556efc9c4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=515021ea-127d-4968-9b2f-4957a9e43ba5"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cf20df43e4ca"]}} {"level":"debug","ts":"2026-07-24T16:49:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d4dc449c-4dc1-4c36-a98e-52bff753f68c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cf20df43e4ca"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=515021ea-127d-4968-9b2f-4957a9e43ba5"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c6920799-9c3c-48b3-a3e6-1c1556efc9c4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0859bd43ff0f301a33f8370a4dcf63821f0f9dd8b97c20e1723b59edc332fe5d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a29da6.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e5404f95-93fd-4bf4-af98-269ecaf50733",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T16:49:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d4dc449c-4dc1-4c36-a98e-52bff753f68c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:49:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d4dc449c-4dc1-4c36-a98e-52bff753f68c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:49:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d4dc449c-4dc1-4c36-a98e-52bff753f68c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a29da6/auth-test-model-a29da6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a29da6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:49:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d4dc449c-4dc1-4c36-a98e-52bff753f68c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T16:49:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d4dc449c-4dc1-4c36-a98e-52bff753f68c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T16:49:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d4dc449c-4dc1-4c36-a98e-52bff753f68c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T16:49:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d4dc449c-4dc1-4c36-a98e-52bff753f68c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T16:49:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d4dc449c-4dc1-4c36-a98e-52bff753f68c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T16:49:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"929a42c8-0fe2-4c75-b2d1-6967926b5411","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:49376","PortSpecifier":{"PortValue":49376}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"929a42c8-0fe2-4c75-b2d1-6967926b5411","method":"GET","path":"/maas-api/v1/api-keys/e5404f95-93fd-4bf4-af98-269ecaf50733","host":"e2e-shared-a-a65dee.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T16:49:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"929a42c8-0fe2-4c75-b2d1-6967926b5411","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:49376","PortSpecifier":{"PortValue":49376}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784911752,"nanos":605647729},"http":{"id":"929a42c8-0fe2-4c75-b2d1-6967926b5411","method":"GET","headers":{":authority":"e2e-shared-a-a65dee.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e5404f95-93fd-4bf4-af98-269ecaf50733",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T16:49:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"929a42c8-0fe2-4c75-b2d1-6967926b5411","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T16:49:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"929a42c8-0fe2-4c75-b2d1-6967926b5411","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c6920799-9c3c-48b3-a3e6-1c1556efc9c4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=515021ea-127d-4968-9b2f-4957a9e43ba5"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cf20df43e4ca"]}} {"level":"debug","ts":"2026-07-24T16:49:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"929a42c8-0fe2-4c75-b2d1-6967926b5411","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cf20df43e4ca"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=515021ea-127d-4968-9b2f-4957a9e43ba5"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c6920799-9c3c-48b3-a3e6-1c1556efc9c4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c149b09b5b073bc00127c50664a04d6254286b8a8aa6d04b02836fb739c7fca2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.74:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a65dee.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e5404f95-93fd-4bf4-af98-269ecaf50733",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T16:49:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"929a42c8-0fe2-4c75-b2d1-6967926b5411","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:49:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"929a42c8-0fe2-4c75-b2d1-6967926b5411","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:49:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"929a42c8-0fe2-4c75-b2d1-6967926b5411","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a65dee/auth-test-model-a65dee\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a65dee/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:49:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"929a42c8-0fe2-4c75-b2d1-6967926b5411","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T16:49:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"929a42c8-0fe2-4c75-b2d1-6967926b5411","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T16:49:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"929a42c8-0fe2-4c75-b2d1-6967926b5411","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-24T16:49:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"929a42c8-0fe2-4c75-b2d1-6967926b5411","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T16:49:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"929a42c8-0fe2-4c75-b2d1-6967926b5411","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T16:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d487589cdc4a8f814627e0fcc61266b724dda84ef6f084334db544547c1071b9"} {"level":"info","ts":"2026-07-24T16:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593"} {"level":"info","ts":"2026-07-24T16:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/61c80f444a0e22fa8dc0d0ef62cd79840caa65095e837fa72c3264c61a723589"} {"level":"info","ts":"2026-07-24T16:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c4a93c8f558ebb54718e3f05f9f2636e68f61bdf1314f4bf943d1a0b6934e89d"} {"level":"info","ts":"2026-07-24T16:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0859bd43ff0f301a33f8370a4dcf63821f0f9dd8b97c20e1723b59edc332fe5d"} {"level":"info","ts":"2026-07-24T16:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d98f12a38bd4d0505b7d20d7d53007df84e486b75ac6103856511a753274c4aa"} {"level":"info","ts":"2026-07-24T16:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b05c087b30ce5ea4a274b443fda9718d851d359e4b61cd6b7e59fa98fbc5239"} {"level":"info","ts":"2026-07-24T16:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4dfb1e07489d767284a498f8bd0e0d25e6ef1ba357fe67316b99236032046edb"} {"level":"info","ts":"2026-07-24T16:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b64b29b0a9cccfecf1b214b026065d42b1249d6c3c30b98e293872badde9b3be"} {"level":"info","ts":"2026-07-24T16:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455"} {"level":"info","ts":"2026-07-24T16:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b6891af388060c48d81654a0e31b2aef8be7074c05389c891eaebb5b661e58be"} {"level":"info","ts":"2026-07-24T16:49:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3"} {"level":"debug","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:49:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:49:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455"} {"level":"debug","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455"} {"level":"debug","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:49:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:49:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:49:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:49:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455"} {"level":"debug","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455"} {"level":"debug","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:49:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:49:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:49:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:49:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455"} {"level":"debug","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455"} {"level":"debug","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:49:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:49:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:49:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:49:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455"} {"level":"debug","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455"} {"level":"debug","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:49:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:49:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:49:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:49:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455"} {"level":"debug","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455"} {"level":"debug","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:49:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:49:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:49:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:49:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455"} {"level":"debug","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455"} {"level":"debug","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:49:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:49:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3"} {"level":"debug","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:49:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:49:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3"} {"level":"info","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:49:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:49:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:49:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:49:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455"} {"level":"info","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:49:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:49:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3"} {"level":"info","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:49:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:49:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:49:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:49:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455"} {"level":"error","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:49:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:49:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:49:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:49:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:49:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:49:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3"} {"level":"info","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3"} {"level":"info","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455"} {"level":"debug","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:49:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:49:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:49:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:49:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:49:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:49:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3"} {"level":"error","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:49:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:49:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:49:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:49:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593"} {"level":"info","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:49:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:49:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:49:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:49:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3"} {"level":"info","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:49:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:49:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593"} {"level":"info","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:49:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:49:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3"} {"level":"debug","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:49:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:49:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593"} {"level":"info","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:49:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:49:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3"} {"level":"info","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3"} {"level":"debug","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3"} {"level":"debug","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4a93c8f558ebb54718e3f05f9f2636e68f61bdf1314f4bf943d1a0b6934e89d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:49:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:49:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4a93c8f558ebb54718e3f05f9f2636e68f61bdf1314f4bf943d1a0b6934e89d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:49:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:49:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4a93c8f558ebb54718e3f05f9f2636e68f61bdf1314f4bf943d1a0b6934e89d"} {"level":"info","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4a93c8f558ebb54718e3f05f9f2636e68f61bdf1314f4bf943d1a0b6934e89d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4a93c8f558ebb54718e3f05f9f2636e68f61bdf1314f4bf943d1a0b6934e89d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4a93c8f558ebb54718e3f05f9f2636e68f61bdf1314f4bf943d1a0b6934e89d"} {"level":"debug","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4a93c8f558ebb54718e3f05f9f2636e68f61bdf1314f4bf943d1a0b6934e89d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:49:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:49:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4a93c8f558ebb54718e3f05f9f2636e68f61bdf1314f4bf943d1a0b6934e89d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3"} {"level":"info","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4a93c8f558ebb54718e3f05f9f2636e68f61bdf1314f4bf943d1a0b6934e89d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4a93c8f558ebb54718e3f05f9f2636e68f61bdf1314f4bf943d1a0b6934e89d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4a93c8f558ebb54718e3f05f9f2636e68f61bdf1314f4bf943d1a0b6934e89d"} {"level":"debug","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0859bd43ff0f301a33f8370a4dcf63821f0f9dd8b97c20e1723b59edc332fe5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:49:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:49:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0859bd43ff0f301a33f8370a4dcf63821f0f9dd8b97c20e1723b59edc332fe5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0859bd43ff0f301a33f8370a4dcf63821f0f9dd8b97c20e1723b59edc332fe5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0859bd43ff0f301a33f8370a4dcf63821f0f9dd8b97c20e1723b59edc332fe5d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0859bd43ff0f301a33f8370a4dcf63821f0f9dd8b97c20e1723b59edc332fe5d"} {"level":"debug","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0859bd43ff0f301a33f8370a4dcf63821f0f9dd8b97c20e1723b59edc332fe5d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0859bd43ff0f301a33f8370a4dcf63821f0f9dd8b97c20e1723b59edc332fe5d"} {"level":"debug","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0859bd43ff0f301a33f8370a4dcf63821f0f9dd8b97c20e1723b59edc332fe5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:49:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:49:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0859bd43ff0f301a33f8370a4dcf63821f0f9dd8b97c20e1723b59edc332fe5d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0859bd43ff0f301a33f8370a4dcf63821f0f9dd8b97c20e1723b59edc332fe5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0859bd43ff0f301a33f8370a4dcf63821f0f9dd8b97c20e1723b59edc332fe5d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0859bd43ff0f301a33f8370a4dcf63821f0f9dd8b97c20e1723b59edc332fe5d"} {"level":"debug","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d98f12a38bd4d0505b7d20d7d53007df84e486b75ac6103856511a753274c4aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:49:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:49:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d98f12a38bd4d0505b7d20d7d53007df84e486b75ac6103856511a753274c4aa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d98f12a38bd4d0505b7d20d7d53007df84e486b75ac6103856511a753274c4aa"} {"level":"debug","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d98f12a38bd4d0505b7d20d7d53007df84e486b75ac6103856511a753274c4aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:49:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:49:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d98f12a38bd4d0505b7d20d7d53007df84e486b75ac6103856511a753274c4aa","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d98f12a38bd4d0505b7d20d7d53007df84e486b75ac6103856511a753274c4aa\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d98f12a38bd4d0505b7d20d7d53007df84e486b75ac6103856511a753274c4aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d98f12a38bd4d0505b7d20d7d53007df84e486b75ac6103856511a753274c4aa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d98f12a38bd4d0505b7d20d7d53007df84e486b75ac6103856511a753274c4aa"} {"level":"debug","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dfb1e07489d767284a498f8bd0e0d25e6ef1ba357fe67316b99236032046edb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:49:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:49:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dfb1e07489d767284a498f8bd0e0d25e6ef1ba357fe67316b99236032046edb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d98f12a38bd4d0505b7d20d7d53007df84e486b75ac6103856511a753274c4aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:49:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:49:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d98f12a38bd4d0505b7d20d7d53007df84e486b75ac6103856511a753274c4aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dfb1e07489d767284a498f8bd0e0d25e6ef1ba357fe67316b99236032046edb"} {"level":"info","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d98f12a38bd4d0505b7d20d7d53007df84e486b75ac6103856511a753274c4aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dfb1e07489d767284a498f8bd0e0d25e6ef1ba357fe67316b99236032046edb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d98f12a38bd4d0505b7d20d7d53007df84e486b75ac6103856511a753274c4aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dfb1e07489d767284a498f8bd0e0d25e6ef1ba357fe67316b99236032046edb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dfb1e07489d767284a498f8bd0e0d25e6ef1ba357fe67316b99236032046edb"} {"level":"debug","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dfb1e07489d767284a498f8bd0e0d25e6ef1ba357fe67316b99236032046edb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:49:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:49:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4dfb1e07489d767284a498f8bd0e0d25e6ef1ba357fe67316b99236032046edb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d98f12a38bd4d0505b7d20d7d53007df84e486b75ac6103856511a753274c4aa"} {"level":"info","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dfb1e07489d767284a498f8bd0e0d25e6ef1ba357fe67316b99236032046edb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dfb1e07489d767284a498f8bd0e0d25e6ef1ba357fe67316b99236032046edb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dfb1e07489d767284a498f8bd0e0d25e6ef1ba357fe67316b99236032046edb"} {"level":"debug","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b64b29b0a9cccfecf1b214b026065d42b1249d6c3c30b98e293872badde9b3be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:49:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:49:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b64b29b0a9cccfecf1b214b026065d42b1249d6c3c30b98e293872badde9b3be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b64b29b0a9cccfecf1b214b026065d42b1249d6c3c30b98e293872badde9b3be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:49:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:49:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b64b29b0a9cccfecf1b214b026065d42b1249d6c3c30b98e293872badde9b3be"} {"level":"info","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b64b29b0a9cccfecf1b214b026065d42b1249d6c3c30b98e293872badde9b3be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b64b29b0a9cccfecf1b214b026065d42b1249d6c3c30b98e293872badde9b3be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:49:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:49:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b64b29b0a9cccfecf1b214b026065d42b1249d6c3c30b98e293872badde9b3be","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b64b29b0a9cccfecf1b214b026065d42b1249d6c3c30b98e293872badde9b3be\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b64b29b0a9cccfecf1b214b026065d42b1249d6c3c30b98e293872badde9b3be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b64b29b0a9cccfecf1b214b026065d42b1249d6c3c30b98e293872badde9b3be","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b64b29b0a9cccfecf1b214b026065d42b1249d6c3c30b98e293872badde9b3be"} {"level":"info","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b64b29b0a9cccfecf1b214b026065d42b1249d6c3c30b98e293872badde9b3be"} {"level":"debug","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6891af388060c48d81654a0e31b2aef8be7074c05389c891eaebb5b661e58be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:49:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:49:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6891af388060c48d81654a0e31b2aef8be7074c05389c891eaebb5b661e58be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b64b29b0a9cccfecf1b214b026065d42b1249d6c3c30b98e293872badde9b3be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:49:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:49:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b64b29b0a9cccfecf1b214b026065d42b1249d6c3c30b98e293872badde9b3be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6891af388060c48d81654a0e31b2aef8be7074c05389c891eaebb5b661e58be"} {"level":"info","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b64b29b0a9cccfecf1b214b026065d42b1249d6c3c30b98e293872badde9b3be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6891af388060c48d81654a0e31b2aef8be7074c05389c891eaebb5b661e58be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b64b29b0a9cccfecf1b214b026065d42b1249d6c3c30b98e293872badde9b3be","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6891af388060c48d81654a0e31b2aef8be7074c05389c891eaebb5b661e58be"} {"level":"debug","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6891af388060c48d81654a0e31b2aef8be7074c05389c891eaebb5b661e58be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:49:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:49:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6891af388060c48d81654a0e31b2aef8be7074c05389c891eaebb5b661e58be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6891af388060c48d81654a0e31b2aef8be7074c05389c891eaebb5b661e58be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6891af388060c48d81654a0e31b2aef8be7074c05389c891eaebb5b661e58be","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b64b29b0a9cccfecf1b214b026065d42b1249d6c3c30b98e293872badde9b3be"} {"level":"info","ts":"2026-07-24T16:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6891af388060c48d81654a0e31b2aef8be7074c05389c891eaebb5b661e58be"} {"level":"debug","ts":"2026-07-24T16:49:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d487589cdc4a8f814627e0fcc61266b724dda84ef6f084334db544547c1071b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:49:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:49:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:49:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d487589cdc4a8f814627e0fcc61266b724dda84ef6f084334db544547c1071b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61c80f444a0e22fa8dc0d0ef62cd79840caa65095e837fa72c3264c61a723589","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:49:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:49:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:49:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d487589cdc4a8f814627e0fcc61266b724dda84ef6f084334db544547c1071b9"} {"level":"info","ts":"2026-07-24T16:49:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61c80f444a0e22fa8dc0d0ef62cd79840caa65095e837fa72c3264c61a723589","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d487589cdc4a8f814627e0fcc61266b724dda84ef6f084334db544547c1071b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:49:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:49:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d487589cdc4a8f814627e0fcc61266b724dda84ef6f084334db544547c1071b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:49:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61c80f444a0e22fa8dc0d0ef62cd79840caa65095e837fa72c3264c61a723589"} {"level":"info","ts":"2026-07-24T16:49:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d487589cdc4a8f814627e0fcc61266b724dda84ef6f084334db544547c1071b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b05c087b30ce5ea4a274b443fda9718d851d359e4b61cd6b7e59fa98fbc5239","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:49:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:49:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:49:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b05c087b30ce5ea4a274b443fda9718d851d359e4b61cd6b7e59fa98fbc5239","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61c80f444a0e22fa8dc0d0ef62cd79840caa65095e837fa72c3264c61a723589","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:49:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:49:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61c80f444a0e22fa8dc0d0ef62cd79840caa65095e837fa72c3264c61a723589"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:49:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d487589cdc4a8f814627e0fcc61266b724dda84ef6f084334db544547c1071b9"} {"level":"info","ts":"2026-07-24T16:49:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61c80f444a0e22fa8dc0d0ef62cd79840caa65095e837fa72c3264c61a723589","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d487589cdc4a8f814627e0fcc61266b724dda84ef6f084334db544547c1071b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b05c087b30ce5ea4a274b443fda9718d851d359e4b61cd6b7e59fa98fbc5239","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:49:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:49:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:49:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b05c087b30ce5ea4a274b443fda9718d851d359e4b61cd6b7e59fa98fbc5239","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61c80f444a0e22fa8dc0d0ef62cd79840caa65095e837fa72c3264c61a723589","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:49:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b05c087b30ce5ea4a274b443fda9718d851d359e4b61cd6b7e59fa98fbc5239"} {"level":"debug","ts":"2026-07-24T16:49:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b05c087b30ce5ea4a274b443fda9718d851d359e4b61cd6b7e59fa98fbc5239","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:49:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:49:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b05c087b30ce5ea4a274b443fda9718d851d359e4b61cd6b7e59fa98fbc5239"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:49:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b05c087b30ce5ea4a274b443fda9718d851d359e4b61cd6b7e59fa98fbc5239","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b05c087b30ce5ea4a274b443fda9718d851d359e4b61cd6b7e59fa98fbc5239","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:49:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:49:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b05c087b30ce5ea4a274b443fda9718d851d359e4b61cd6b7e59fa98fbc5239"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:49:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61c80f444a0e22fa8dc0d0ef62cd79840caa65095e837fa72c3264c61a723589"} {"level":"error","ts":"2026-07-24T16:49:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7b05c087b30ce5ea4a274b443fda9718d851d359e4b61cd6b7e59fa98fbc5239","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7b05c087b30ce5ea4a274b443fda9718d851d359e4b61cd6b7e59fa98fbc5239\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T16:49:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b05c087b30ce5ea4a274b443fda9718d851d359e4b61cd6b7e59fa98fbc5239","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:49:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b05c087b30ce5ea4a274b443fda9718d851d359e4b61cd6b7e59fa98fbc5239","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:49:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d487589cdc4a8f814627e0fcc61266b724dda84ef6f084334db544547c1071b9"} {"level":"info","ts":"2026-07-24T16:49:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b05c087b30ce5ea4a274b443fda9718d851d359e4b61cd6b7e59fa98fbc5239"} {"level":"info","ts":"2026-07-24T16:49:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ed32f76-5dcd-449f-b879-b541ddf41f06","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:42398","PortSpecifier":{"PortValue":42398}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3ed32f76-5dcd-449f-b879-b541ddf41f06","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a65dee.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T16:49:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ed32f76-5dcd-449f-b879-b541ddf41f06","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:42398","PortSpecifier":{"PortValue":42398}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784911769,"nanos":688932437},"http":{"id":"3ed32f76-5dcd-449f-b879-b541ddf41f06","method":"POST","headers":{":authority":"e2e-shared-a-a65dee.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T16:49:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3ed32f76-5dcd-449f-b879-b541ddf41f06","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T16:49:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3ed32f76-5dcd-449f-b879-b541ddf41f06","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c6920799-9c3c-48b3-a3e6-1c1556efc9c4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=515021ea-127d-4968-9b2f-4957a9e43ba5"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cf20df43e4ca"]}} {"level":"debug","ts":"2026-07-24T16:49:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3ed32f76-5dcd-449f-b879-b541ddf41f06","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cf20df43e4ca"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=515021ea-127d-4968-9b2f-4957a9e43ba5"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c6920799-9c3c-48b3-a3e6-1c1556efc9c4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c149b09b5b073bc00127c50664a04d6254286b8a8aa6d04b02836fb739c7fca2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.74:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a65dee.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T16:49:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ed32f76-5dcd-449f-b879-b541ddf41f06","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:49:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ed32f76-5dcd-449f-b879-b541ddf41f06","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:49:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ed32f76-5dcd-449f-b879-b541ddf41f06","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a65dee/auth-test-model-a65dee\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a65dee/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:49:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3ed32f76-5dcd-449f-b879-b541ddf41f06","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T16:49:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ed32f76-5dcd-449f-b879-b541ddf41f06","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T16:49:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ed32f76-5dcd-449f-b879-b541ddf41f06","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-24T16:49:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ed32f76-5dcd-449f-b879-b541ddf41f06","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T16:49:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ed32f76-5dcd-449f-b879-b541ddf41f06","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T16:49:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9d696441-6ca5-44fa-bfc4-feeffc6bfd8c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:33396","PortSpecifier":{"PortValue":33396}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9d696441-6ca5-44fa-bfc4-feeffc6bfd8c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a29da6.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T16:49:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9d696441-6ca5-44fa-bfc4-feeffc6bfd8c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:33396","PortSpecifier":{"PortValue":33396}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784911769,"nanos":730716606},"http":{"id":"9d696441-6ca5-44fa-bfc4-feeffc6bfd8c","method":"POST","headers":{":authority":"e2e-shared-b-a29da6.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T16:49:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9d696441-6ca5-44fa-bfc4-feeffc6bfd8c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T16:49:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9d696441-6ca5-44fa-bfc4-feeffc6bfd8c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c6920799-9c3c-48b3-a3e6-1c1556efc9c4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=515021ea-127d-4968-9b2f-4957a9e43ba5"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cf20df43e4ca"]}} {"level":"debug","ts":"2026-07-24T16:49:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9d696441-6ca5-44fa-bfc4-feeffc6bfd8c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cf20df43e4ca"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=515021ea-127d-4968-9b2f-4957a9e43ba5"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c6920799-9c3c-48b3-a3e6-1c1556efc9c4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0859bd43ff0f301a33f8370a4dcf63821f0f9dd8b97c20e1723b59edc332fe5d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a29da6.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T16:49:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9d696441-6ca5-44fa-bfc4-feeffc6bfd8c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:49:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9d696441-6ca5-44fa-bfc4-feeffc6bfd8c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:49:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9d696441-6ca5-44fa-bfc4-feeffc6bfd8c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a29da6/auth-test-model-a29da6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a29da6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:49:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9d696441-6ca5-44fa-bfc4-feeffc6bfd8c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T16:49:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9d696441-6ca5-44fa-bfc4-feeffc6bfd8c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T16:49:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9d696441-6ca5-44fa-bfc4-feeffc6bfd8c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-24T16:49:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9d696441-6ca5-44fa-bfc4-feeffc6bfd8c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T16:49:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9d696441-6ca5-44fa-bfc4-feeffc6bfd8c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T16:49:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1f3145f9-f48b-41e9-9677-602123603dec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:42410","PortSpecifier":{"PortValue":42410}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1f3145f9-f48b-41e9-9677-602123603dec","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-a65dee.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T16:49:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1f3145f9-f48b-41e9-9677-602123603dec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:42410","PortSpecifier":{"PortValue":42410}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784911769,"nanos":770816150},"http":{"id":"1f3145f9-f48b-41e9-9677-602123603dec","method":"POST","headers":{":authority":"e2e-shared-a-a65dee.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T16:49:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1f3145f9-f48b-41e9-9677-602123603dec","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-iuP0HbY670McSurX_jWODmv1I8eboWlsct7VkTO0djJq3UzHl3u7CKAFLlkJ"} {"level":"debug","ts":"2026-07-24T16:49:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1f3145f9-f48b-41e9-9677-602123603dec","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-iuP0HbY670McSurX_jWODmv1I8eboWlsct7VkTO0djJq3UzHl3u7CKAFLlkJ\"}"} {"level":"debug","ts":"2026-07-24T16:49:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1f3145f9-f48b-41e9-9677-602123603dec","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"97c5061f-26a9-47a1-a5ef-b89f5f4ec846","keyName":"e2e-auth-iso-a-d004a7","subscription":"e2e-auth-iso-e228a4","tenant":"e2e-shared-a-a65dee","userId":"97c5061f-26a9-47a1-a5ef-b89f5f4ec846","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T16:49:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1f3145f9-f48b-41e9-9677-602123603dec","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T16:49:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f3145f9-f48b-41e9-9677-602123603dec","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:49:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f3145f9-f48b-41e9-9677-602123603dec","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:49:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f3145f9-f48b-41e9-9677-602123603dec","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a65dee/auth-test-model-a65dee\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a65dee/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:49:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f3145f9-f48b-41e9-9677-602123603dec","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T16:49:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f3145f9-f48b-41e9-9677-602123603dec","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T16:49:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f3145f9-f48b-41e9-9677-602123603dec","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-e228a4"} {"level":"debug","ts":"2026-07-24T16:49:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1f3145f9-f48b-41e9-9677-602123603dec","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-24T16:49:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1f3145f9-f48b-41e9-9677-602123603dec","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T16:49:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1f3145f9-f48b-41e9-9677-602123603dec","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T16:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4dfb1e07489d767284a498f8bd0e0d25e6ef1ba357fe67316b99236032046edb"} {"level":"info","ts":"2026-07-24T16:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d98f12a38bd4d0505b7d20d7d53007df84e486b75ac6103856511a753274c4aa"} {"level":"info","ts":"2026-07-24T16:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0859bd43ff0f301a33f8370a4dcf63821f0f9dd8b97c20e1723b59edc332fe5d"} {"level":"info","ts":"2026-07-24T16:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455"} {"level":"info","ts":"2026-07-24T16:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d9d85fcffd260c47d6af7f0fd2af51c5a62cbf9c0da3f7b35719104e685e2f85"} {"level":"info","ts":"2026-07-24T16:49:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593"} {"level":"info","ts":"2026-07-24T16:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/07a2f10e4ab2b88c31407b21bc380a3c74461cac4ccf8c00f18a13cd6d527683"} {"level":"info","ts":"2026-07-24T16:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9ec4a1a20f711cb28992864c3e80ab8a3d4c337050c268a74ed98747f5385593"} {"level":"info","ts":"2026-07-24T16:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c4a93c8f558ebb54718e3f05f9f2636e68f61bdf1314f4bf943d1a0b6934e89d"} {"level":"info","ts":"2026-07-24T16:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f5f7e43b9930f08a63a154efdc71eea032e11b7c401d5d1becc38657482bad87"} {"level":"info","ts":"2026-07-24T16:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8dffb190a5532a3869f6978dfe80531ca8a113ff7fae89523d8dac2e1e219761"} {"level":"info","ts":"2026-07-24T16:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/06b3e29847585b06730a0e4a5ecf735bcefb73a8592d9bcd29af35997816febe"} {"level":"info","ts":"2026-07-24T16:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/59bd1cc09a817cc67cc1b8d3af02792366ea8dd1345f01d3bdd60319d5b17fdf"} {"level":"info","ts":"2026-07-24T16:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3"} {"level":"info","ts":"2026-07-24T16:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ab4e4432570e10264f1ca6101a5ee7d083d0be941423cce4d67786e21992d9ef"} {"level":"info","ts":"2026-07-24T16:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b6891af388060c48d81654a0e31b2aef8be7074c05389c891eaebb5b661e58be"} {"level":"info","ts":"2026-07-24T16:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ab38af1ebba7afb1bbe00772f652cc39e698dcc174beb38b14eddb5a04d636b7"} {"level":"info","ts":"2026-07-24T16:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d487589cdc4a8f814627e0fcc61266b724dda84ef6f084334db544547c1071b9"} {"level":"info","ts":"2026-07-24T16:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b64b29b0a9cccfecf1b214b026065d42b1249d6c3c30b98e293872badde9b3be"} {"level":"info","ts":"2026-07-24T16:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8426e329926d72bba77778e48cd9dead758defca9d0dbcaddb6be19e7f1c97af"} {"level":"info","ts":"2026-07-24T16:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/61c80f444a0e22fa8dc0d0ef62cd79840caa65095e837fa72c3264c61a723589"} {"level":"info","ts":"2026-07-24T16:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c149b09b5b073bc00127c50664a04d6254286b8a8aa6d04b02836fb739c7fca2"} {"level":"info","ts":"2026-07-24T16:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5faaf215ccb0d3ab9f6df7ed4b212bdaac7e1d1730877bfb3196b033b1cb8746"} {"level":"info","ts":"2026-07-24T16:49:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b05c087b30ce5ea4a274b443fda9718d851d359e4b61cd6b7e59fa98fbc5239"} {"level":"debug","ts":"2026-07-24T16:50:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ec4a1a20f711cb28992864c3e80ab8a3d4c337050c268a74ed98747f5385593","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:50:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:50:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ec4a1a20f711cb28992864c3e80ab8a3d4c337050c268a74ed98747f5385593","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ec4a1a20f711cb28992864c3e80ab8a3d4c337050c268a74ed98747f5385593","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:50:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:50:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ec4a1a20f711cb28992864c3e80ab8a3d4c337050c268a74ed98747f5385593"} {"level":"info","ts":"2026-07-24T16:50:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ec4a1a20f711cb28992864c3e80ab8a3d4c337050c268a74ed98747f5385593","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ec4a1a20f711cb28992864c3e80ab8a3d4c337050c268a74ed98747f5385593","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:50:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:50:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T16:50:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9ec4a1a20f711cb28992864c3e80ab8a3d4c337050c268a74ed98747f5385593","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9ec4a1a20f711cb28992864c3e80ab8a3d4c337050c268a74ed98747f5385593\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T16:50:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ec4a1a20f711cb28992864c3e80ab8a3d4c337050c268a74ed98747f5385593","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ec4a1a20f711cb28992864c3e80ab8a3d4c337050c268a74ed98747f5385593","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:50:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ec4a1a20f711cb28992864c3e80ab8a3d4c337050c268a74ed98747f5385593"} {"level":"info","ts":"2026-07-24T16:50:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ec4a1a20f711cb28992864c3e80ab8a3d4c337050c268a74ed98747f5385593"} {"level":"debug","ts":"2026-07-24T16:50:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e738ec1aeb0b33a0bb1b1f395a9862cd7cd86dd2caf45fbaa59e253ccfd7bf1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:50:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:50:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e738ec1aeb0b33a0bb1b1f395a9862cd7cd86dd2caf45fbaa59e253ccfd7bf1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e738ec1aeb0b33a0bb1b1f395a9862cd7cd86dd2caf45fbaa59e253ccfd7bf1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:50:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e738ec1aeb0b33a0bb1b1f395a9862cd7cd86dd2caf45fbaa59e253ccfd7bf1"} {"level":"debug","ts":"2026-07-24T16:50:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e738ec1aeb0b33a0bb1b1f395a9862cd7cd86dd2caf45fbaa59e253ccfd7bf1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ec4a1a20f711cb28992864c3e80ab8a3d4c337050c268a74ed98747f5385593","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:50:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:50:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ec4a1a20f711cb28992864c3e80ab8a3d4c337050c268a74ed98747f5385593"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ec4a1a20f711cb28992864c3e80ab8a3d4c337050c268a74ed98747f5385593","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ec4a1a20f711cb28992864c3e80ab8a3d4c337050c268a74ed98747f5385593","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e738ec1aeb0b33a0bb1b1f395a9862cd7cd86dd2caf45fbaa59e253ccfd7bf1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:50:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e738ec1aeb0b33a0bb1b1f395a9862cd7cd86dd2caf45fbaa59e253ccfd7bf1"} {"level":"info","ts":"2026-07-24T16:50:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ec4a1a20f711cb28992864c3e80ab8a3d4c337050c268a74ed98747f5385593"} {"level":"debug","ts":"2026-07-24T16:50:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e738ec1aeb0b33a0bb1b1f395a9862cd7cd86dd2caf45fbaa59e253ccfd7bf1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:50:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:50:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e738ec1aeb0b33a0bb1b1f395a9862cd7cd86dd2caf45fbaa59e253ccfd7bf1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e738ec1aeb0b33a0bb1b1f395a9862cd7cd86dd2caf45fbaa59e253ccfd7bf1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e738ec1aeb0b33a0bb1b1f395a9862cd7cd86dd2caf45fbaa59e253ccfd7bf1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:50:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:50:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e738ec1aeb0b33a0bb1b1f395a9862cd7cd86dd2caf45fbaa59e253ccfd7bf1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e738ec1aeb0b33a0bb1b1f395a9862cd7cd86dd2caf45fbaa59e253ccfd7bf1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e738ec1aeb0b33a0bb1b1f395a9862cd7cd86dd2caf45fbaa59e253ccfd7bf1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:50:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e738ec1aeb0b33a0bb1b1f395a9862cd7cd86dd2caf45fbaa59e253ccfd7bf1"} {"level":"debug","ts":"2026-07-24T16:50:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e738ec1aeb0b33a0bb1b1f395a9862cd7cd86dd2caf45fbaa59e253ccfd7bf1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:50:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e738ec1aeb0b33a0bb1b1f395a9862cd7cd86dd2caf45fbaa59e253ccfd7bf1"} {"level":"debug","ts":"2026-07-24T16:50:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e738ec1aeb0b33a0bb1b1f395a9862cd7cd86dd2caf45fbaa59e253ccfd7bf1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:50:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:50:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e738ec1aeb0b33a0bb1b1f395a9862cd7cd86dd2caf45fbaa59e253ccfd7bf1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e738ec1aeb0b33a0bb1b1f395a9862cd7cd86dd2caf45fbaa59e253ccfd7bf1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e738ec1aeb0b33a0bb1b1f395a9862cd7cd86dd2caf45fbaa59e253ccfd7bf1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81e9995ddd9f9c35264bed75e0221689f4a1913ca22359ec147216fb4c2cfb28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:50:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:50:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e738ec1aeb0b33a0bb1b1f395a9862cd7cd86dd2caf45fbaa59e253ccfd7bf1"} {"level":"info","ts":"2026-07-24T16:50:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81e9995ddd9f9c35264bed75e0221689f4a1913ca22359ec147216fb4c2cfb28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81e9995ddd9f9c35264bed75e0221689f4a1913ca22359ec147216fb4c2cfb28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:50:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:50:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81e9995ddd9f9c35264bed75e0221689f4a1913ca22359ec147216fb4c2cfb28"} {"level":"info","ts":"2026-07-24T16:50:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81e9995ddd9f9c35264bed75e0221689f4a1913ca22359ec147216fb4c2cfb28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81e9995ddd9f9c35264bed75e0221689f4a1913ca22359ec147216fb4c2cfb28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:50:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:50:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T16:50:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"81e9995ddd9f9c35264bed75e0221689f4a1913ca22359ec147216fb4c2cfb28","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"81e9995ddd9f9c35264bed75e0221689f4a1913ca22359ec147216fb4c2cfb28\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T16:50:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81e9995ddd9f9c35264bed75e0221689f4a1913ca22359ec147216fb4c2cfb28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81e9995ddd9f9c35264bed75e0221689f4a1913ca22359ec147216fb4c2cfb28","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:50:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81e9995ddd9f9c35264bed75e0221689f4a1913ca22359ec147216fb4c2cfb28"} {"level":"info","ts":"2026-07-24T16:50:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81e9995ddd9f9c35264bed75e0221689f4a1913ca22359ec147216fb4c2cfb28"} {"level":"debug","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82ad05da69d8be2975ed495d4a0cc6952a7e11a5b69225ec1cdab9df53c7ac65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82ad05da69d8be2975ed495d4a0cc6952a7e11a5b69225ec1cdab9df53c7ac65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82ad05da69d8be2975ed495d4a0cc6952a7e11a5b69225ec1cdab9df53c7ac65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82ad05da69d8be2975ed495d4a0cc6952a7e11a5b69225ec1cdab9df53c7ac65","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82ad05da69d8be2975ed495d4a0cc6952a7e11a5b69225ec1cdab9df53c7ac65"} {"level":"debug","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81e9995ddd9f9c35264bed75e0221689f4a1913ca22359ec147216fb4c2cfb28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81e9995ddd9f9c35264bed75e0221689f4a1913ca22359ec147216fb4c2cfb28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81e9995ddd9f9c35264bed75e0221689f4a1913ca22359ec147216fb4c2cfb28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81e9995ddd9f9c35264bed75e0221689f4a1913ca22359ec147216fb4c2cfb28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82ad05da69d8be2975ed495d4a0cc6952a7e11a5b69225ec1cdab9df53c7ac65","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82ad05da69d8be2975ed495d4a0cc6952a7e11a5b69225ec1cdab9df53c7ac65"} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81e9995ddd9f9c35264bed75e0221689f4a1913ca22359ec147216fb4c2cfb28"} {"level":"debug","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82ad05da69d8be2975ed495d4a0cc6952a7e11a5b69225ec1cdab9df53c7ac65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["82ad05da69d8be2975ed495d4a0cc6952a7e11a5b69225ec1cdab9df53c7ac65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82ad05da69d8be2975ed495d4a0cc6952a7e11a5b69225ec1cdab9df53c7ac65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82ad05da69d8be2975ed495d4a0cc6952a7e11a5b69225ec1cdab9df53c7ac65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82ad05da69d8be2975ed495d4a0cc6952a7e11a5b69225ec1cdab9df53c7ac65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0859bd43ff0f301a33f8370a4dcf63821f0f9dd8b97c20e1723b59edc332fe5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82ad05da69d8be2975ed495d4a0cc6952a7e11a5b69225ec1cdab9df53c7ac65"} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0859bd43ff0f301a33f8370a4dcf63821f0f9dd8b97c20e1723b59edc332fe5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82ad05da69d8be2975ed495d4a0cc6952a7e11a5b69225ec1cdab9df53c7ac65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["82ad05da69d8be2975ed495d4a0cc6952a7e11a5b69225ec1cdab9df53c7ac65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0859bd43ff0f301a33f8370a4dcf63821f0f9dd8b97c20e1723b59edc332fe5d"} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82ad05da69d8be2975ed495d4a0cc6952a7e11a5b69225ec1cdab9df53c7ac65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0859bd43ff0f301a33f8370a4dcf63821f0f9dd8b97c20e1723b59edc332fe5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0859bd43ff0f301a33f8370a4dcf63821f0f9dd8b97c20e1723b59edc332fe5d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0859bd43ff0f301a33f8370a4dcf63821f0f9dd8b97c20e1723b59edc332fe5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82ad05da69d8be2975ed495d4a0cc6952a7e11a5b69225ec1cdab9df53c7ac65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82ad05da69d8be2975ed495d4a0cc6952a7e11a5b69225ec1cdab9df53c7ac65"} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82ad05da69d8be2975ed495d4a0cc6952a7e11a5b69225ec1cdab9df53c7ac65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0859bd43ff0f301a33f8370a4dcf63821f0f9dd8b97c20e1723b59edc332fe5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0859bd43ff0f301a33f8370a4dcf63821f0f9dd8b97c20e1723b59edc332fe5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82ad05da69d8be2975ed495d4a0cc6952a7e11a5b69225ec1cdab9df53c7ac65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["82ad05da69d8be2975ed495d4a0cc6952a7e11a5b69225ec1cdab9df53c7ac65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82ad05da69d8be2975ed495d4a0cc6952a7e11a5b69225ec1cdab9df53c7ac65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0859bd43ff0f301a33f8370a4dcf63821f0f9dd8b97c20e1723b59edc332fe5d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0859bd43ff0f301a33f8370a4dcf63821f0f9dd8b97c20e1723b59edc332fe5d"} {"level":"debug","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82ad05da69d8be2975ed495d4a0cc6952a7e11a5b69225ec1cdab9df53c7ac65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82ad05da69d8be2975ed495d4a0cc6952a7e11a5b69225ec1cdab9df53c7ac65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c149b09b5b073bc00127c50664a04d6254286b8a8aa6d04b02836fb739c7fca2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c149b09b5b073bc00127c50664a04d6254286b8a8aa6d04b02836fb739c7fca2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0859bd43ff0f301a33f8370a4dcf63821f0f9dd8b97c20e1723b59edc332fe5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0859bd43ff0f301a33f8370a4dcf63821f0f9dd8b97c20e1723b59edc332fe5d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0859bd43ff0f301a33f8370a4dcf63821f0f9dd8b97c20e1723b59edc332fe5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82ad05da69d8be2975ed495d4a0cc6952a7e11a5b69225ec1cdab9df53c7ac65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c149b09b5b073bc00127c50664a04d6254286b8a8aa6d04b02836fb739c7fca2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0859bd43ff0f301a33f8370a4dcf63821f0f9dd8b97c20e1723b59edc332fe5d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82ad05da69d8be2975ed495d4a0cc6952a7e11a5b69225ec1cdab9df53c7ac65"} {"level":"debug","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82ad05da69d8be2975ed495d4a0cc6952a7e11a5b69225ec1cdab9df53c7ac65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["82ad05da69d8be2975ed495d4a0cc6952a7e11a5b69225ec1cdab9df53c7ac65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82ad05da69d8be2975ed495d4a0cc6952a7e11a5b69225ec1cdab9df53c7ac65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c149b09b5b073bc00127c50664a04d6254286b8a8aa6d04b02836fb739c7fca2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82ad05da69d8be2975ed495d4a0cc6952a7e11a5b69225ec1cdab9df53c7ac65","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0859bd43ff0f301a33f8370a4dcf63821f0f9dd8b97c20e1723b59edc332fe5d"} {"level":"debug","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c149b09b5b073bc00127c50664a04d6254286b8a8aa6d04b02836fb739c7fca2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c149b09b5b073bc00127c50664a04d6254286b8a8aa6d04b02836fb739c7fca2"} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c149b09b5b073bc00127c50664a04d6254286b8a8aa6d04b02836fb739c7fca2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c149b09b5b073bc00127c50664a04d6254286b8a8aa6d04b02836fb739c7fca2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c149b09b5b073bc00127c50664a04d6254286b8a8aa6d04b02836fb739c7fca2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c149b09b5b073bc00127c50664a04d6254286b8a8aa6d04b02836fb739c7fca2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82ad05da69d8be2975ed495d4a0cc6952a7e11a5b69225ec1cdab9df53c7ac65"} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c149b09b5b073bc00127c50664a04d6254286b8a8aa6d04b02836fb739c7fca2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c149b09b5b073bc00127c50664a04d6254286b8a8aa6d04b02836fb739c7fca2"} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c149b09b5b073bc00127c50664a04d6254286b8a8aa6d04b02836fb739c7fca2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c149b09b5b073bc00127c50664a04d6254286b8a8aa6d04b02836fb739c7fca2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c149b09b5b073bc00127c50664a04d6254286b8a8aa6d04b02836fb739c7fca2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455"} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c149b09b5b073bc00127c50664a04d6254286b8a8aa6d04b02836fb739c7fca2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c149b09b5b073bc00127c50664a04d6254286b8a8aa6d04b02836fb739c7fca2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c149b09b5b073bc00127c50664a04d6254286b8a8aa6d04b02836fb739c7fca2"} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c149b09b5b073bc00127c50664a04d6254286b8a8aa6d04b02836fb739c7fca2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c149b09b5b073bc00127c50664a04d6254286b8a8aa6d04b02836fb739c7fca2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c149b09b5b073bc00127c50664a04d6254286b8a8aa6d04b02836fb739c7fca2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455"} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c149b09b5b073bc00127c50664a04d6254286b8a8aa6d04b02836fb739c7fca2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c149b09b5b073bc00127c50664a04d6254286b8a8aa6d04b02836fb739c7fca2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c149b09b5b073bc00127c50664a04d6254286b8a8aa6d04b02836fb739c7fca2"} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c149b09b5b073bc00127c50664a04d6254286b8a8aa6d04b02836fb739c7fca2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455"} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c149b09b5b073bc00127c50664a04d6254286b8a8aa6d04b02836fb739c7fca2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c149b09b5b073bc00127c50664a04d6254286b8a8aa6d04b02836fb739c7fca2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c149b09b5b073bc00127c50664a04d6254286b8a8aa6d04b02836fb739c7fca2"} {"level":"error","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c149b09b5b073bc00127c50664a04d6254286b8a8aa6d04b02836fb739c7fca2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c149b09b5b073bc00127c50664a04d6254286b8a8aa6d04b02836fb739c7fca2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455"} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c149b09b5b073bc00127c50664a04d6254286b8a8aa6d04b02836fb739c7fca2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c149b09b5b073bc00127c50664a04d6254286b8a8aa6d04b02836fb739c7fca2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb6dcdb6e9ea3355e02e59fd215e0620ddc0b79db1abeb9e70f4584d7488896c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455"} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb6dcdb6e9ea3355e02e59fd215e0620ddc0b79db1abeb9e70f4584d7488896c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb6dcdb6e9ea3355e02e59fd215e0620ddc0b79db1abeb9e70f4584d7488896c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb6dcdb6e9ea3355e02e59fd215e0620ddc0b79db1abeb9e70f4584d7488896c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c149b09b5b073bc00127c50664a04d6254286b8a8aa6d04b02836fb739c7fca2"} {"level":"debug","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb6dcdb6e9ea3355e02e59fd215e0620ddc0b79db1abeb9e70f4584d7488896c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb6dcdb6e9ea3355e02e59fd215e0620ddc0b79db1abeb9e70f4584d7488896c"} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb6dcdb6e9ea3355e02e59fd215e0620ddc0b79db1abeb9e70f4584d7488896c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455"} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb6dcdb6e9ea3355e02e59fd215e0620ddc0b79db1abeb9e70f4584d7488896c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb6dcdb6e9ea3355e02e59fd215e0620ddc0b79db1abeb9e70f4584d7488896c"} {"level":"debug","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455"} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb6dcdb6e9ea3355e02e59fd215e0620ddc0b79db1abeb9e70f4584d7488896c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb6dcdb6e9ea3355e02e59fd215e0620ddc0b79db1abeb9e70f4584d7488896c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/baf253fd5cd411b1796be17e409b4d420349d23cf75ba83292fc9972ae7ffd3a"} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455"} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb6dcdb6e9ea3355e02e59fd215e0620ddc0b79db1abeb9e70f4584d7488896c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"baf253fd5cd411b1796be17e409b4d420349d23cf75ba83292fc9972ae7ffd3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["baf253fd5cd411b1796be17e409b4d420349d23cf75ba83292fc9972ae7ffd3a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb6dcdb6e9ea3355e02e59fd215e0620ddc0b79db1abeb9e70f4584d7488896c"} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"baf253fd5cd411b1796be17e409b4d420349d23cf75ba83292fc9972ae7ffd3a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593"} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0bbcb710479288c0124cf6409bf5b281edd8e098cc3c9fed27d6c7667b84ab4"} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/baf253fd5cd411b1796be17e409b4d420349d23cf75ba83292fc9972ae7ffd3a"} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb6dcdb6e9ea3355e02e59fd215e0620ddc0b79db1abeb9e70f4584d7488896c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455"} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0bbcb710479288c0124cf6409bf5b281edd8e098cc3c9fed27d6c7667b84ab4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e0bbcb710479288c0124cf6409bf5b281edd8e098cc3c9fed27d6c7667b84ab4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5dd61f9f658ed51c3db0e379e6b514132961b5e5b082de1c1080d6e842b96c3"} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd0fa93690c196e5c3835bb2e06063b0061574b3f5030a16c84fe0171579717b"} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593"} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0bbcb710479288c0124cf6409bf5b281edd8e098cc3c9fed27d6c7667b84ab4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"baf253fd5cd411b1796be17e409b4d420349d23cf75ba83292fc9972ae7ffd3a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5dd61f9f658ed51c3db0e379e6b514132961b5e5b082de1c1080d6e842b96c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5dd61f9f658ed51c3db0e379e6b514132961b5e5b082de1c1080d6e842b96c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0ddc2f51316b31026769cf6672e4d775d7617378edeed0df7ea35c7b1563dbe"} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0bbcb710479288c0124cf6409bf5b281edd8e098cc3c9fed27d6c7667b84ab4"} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5f7e43b9930f08a63a154efdc71eea032e11b7c401d5d1becc38657482bad87"} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5dd61f9f658ed51c3db0e379e6b514132961b5e5b082de1c1080d6e842b96c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd0fa93690c196e5c3835bb2e06063b0061574b3f5030a16c84fe0171579717b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd0fa93690c196e5c3835bb2e06063b0061574b3f5030a16c84fe0171579717b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35525b1110e2bcbf2641063df043e43ebbc04ab0c82fa801354b8c5fae30debe"} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5dd61f9f658ed51c3db0e379e6b514132961b5e5b082de1c1080d6e842b96c3"} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd0fa93690c196e5c3835bb2e06063b0061574b3f5030a16c84fe0171579717b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0ddc2f51316b31026769cf6672e4d775d7617378edeed0df7ea35c7b1563dbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:50:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0ddc2f51316b31026769cf6672e4d775d7617378edeed0df7ea35c7b1563dbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/589d2ecdc82b8822b892a146b449d346cc815e244b62add52b7a5a27f8f8ce60"} {"level":"info","ts":"2026-07-24T16:50:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab38af1ebba7afb1bbe00772f652cc39e698dcc174beb38b14eddb5a04d636b7"} {"level":"info","ts":"2026-07-24T16:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4db0c156a24e5ba3308046cf340c73e8fde3b46baf812a6a4ca6072d4683b2a1"} {"level":"info","ts":"2026-07-24T16:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0ddc2f51316b31026769cf6672e4d775d7617378edeed0df7ea35c7b1563dbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0bbcb710479288c0124cf6409bf5b281edd8e098cc3c9fed27d6c7667b84ab4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5f7e43b9930f08a63a154efdc71eea032e11b7c401d5d1becc38657482bad87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:50:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:50:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5f7e43b9930f08a63a154efdc71eea032e11b7c401d5d1becc38657482bad87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be6f9e35a81ecca33c1660f56cf36776e93f0d2e5fd0ce2132e268b20c148dc4"} {"level":"info","ts":"2026-07-24T16:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5f7e43b9930f08a63a154efdc71eea032e11b7c401d5d1becc38657482bad87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35525b1110e2bcbf2641063df043e43ebbc04ab0c82fa801354b8c5fae30debe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:50:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:50:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35525b1110e2bcbf2641063df043e43ebbc04ab0c82fa801354b8c5fae30debe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd0fa93690c196e5c3835bb2e06063b0061574b3f5030a16c84fe0171579717b"} {"level":"info","ts":"2026-07-24T16:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35525b1110e2bcbf2641063df043e43ebbc04ab0c82fa801354b8c5fae30debe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5dd61f9f658ed51c3db0e379e6b514132961b5e5b082de1c1080d6e842b96c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"589d2ecdc82b8822b892a146b449d346cc815e244b62add52b7a5a27f8f8ce60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:50:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:50:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["589d2ecdc82b8822b892a146b449d346cc815e244b62add52b7a5a27f8f8ce60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ce769eb6868c94fd0f621fdf44d11412f2c9f961b9c669f7ad7f22fc6c91269"} {"level":"info","ts":"2026-07-24T16:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25e43dd8cd9e8df003eab83d5aa39480d5ed52e17e5a5f20137f1d4a19dd34de"} {"level":"info","ts":"2026-07-24T16:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0ddc2f51316b31026769cf6672e4d775d7617378edeed0df7ea35c7b1563dbe"} {"level":"info","ts":"2026-07-24T16:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"589d2ecdc82b8822b892a146b449d346cc815e244b62add52b7a5a27f8f8ce60","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab38af1ebba7afb1bbe00772f652cc39e698dcc174beb38b14eddb5a04d636b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:50:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:50:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab38af1ebba7afb1bbe00772f652cc39e698dcc174beb38b14eddb5a04d636b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3"} {"level":"info","ts":"2026-07-24T16:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5aeffe8621f21d3f3ce127acb9fcd24badc95a166e893b1e6d41ed10ce12e2b"} {"level":"info","ts":"2026-07-24T16:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab38af1ebba7afb1bbe00772f652cc39e698dcc174beb38b14eddb5a04d636b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4db0c156a24e5ba3308046cf340c73e8fde3b46baf812a6a4ca6072d4683b2a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:50:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:50:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4db0c156a24e5ba3308046cf340c73e8fde3b46baf812a6a4ca6072d4683b2a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5f7e43b9930f08a63a154efdc71eea032e11b7c401d5d1becc38657482bad87"} {"level":"info","ts":"2026-07-24T16:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35525b1110e2bcbf2641063df043e43ebbc04ab0c82fa801354b8c5fae30debe"} {"level":"info","ts":"2026-07-24T16:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4db0c156a24e5ba3308046cf340c73e8fde3b46baf812a6a4ca6072d4683b2a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be6f9e35a81ecca33c1660f56cf36776e93f0d2e5fd0ce2132e268b20c148dc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:50:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:50:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be6f9e35a81ecca33c1660f56cf36776e93f0d2e5fd0ce2132e268b20c148dc4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/589d2ecdc82b8822b892a146b449d346cc815e244b62add52b7a5a27f8f8ce60"} {"level":"info","ts":"2026-07-24T16:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab38af1ebba7afb1bbe00772f652cc39e698dcc174beb38b14eddb5a04d636b7"} {"level":"info","ts":"2026-07-24T16:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4db0c156a24e5ba3308046cf340c73e8fde3b46baf812a6a4ca6072d4683b2a1"} {"level":"info","ts":"2026-07-24T16:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be6f9e35a81ecca33c1660f56cf36776e93f0d2e5fd0ce2132e268b20c148dc4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd0fa93690c196e5c3835bb2e06063b0061574b3f5030a16c84fe0171579717b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ce769eb6868c94fd0f621fdf44d11412f2c9f961b9c669f7ad7f22fc6c91269","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:50:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:50:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ce769eb6868c94fd0f621fdf44d11412f2c9f961b9c669f7ad7f22fc6c91269"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be6f9e35a81ecca33c1660f56cf36776e93f0d2e5fd0ce2132e268b20c148dc4"} {"level":"info","ts":"2026-07-24T16:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ce769eb6868c94fd0f621fdf44d11412f2c9f961b9c669f7ad7f22fc6c91269","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25e43dd8cd9e8df003eab83d5aa39480d5ed52e17e5a5f20137f1d4a19dd34de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:50:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:50:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25e43dd8cd9e8df003eab83d5aa39480d5ed52e17e5a5f20137f1d4a19dd34de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ce769eb6868c94fd0f621fdf44d11412f2c9f961b9c669f7ad7f22fc6c91269"} {"level":"info","ts":"2026-07-24T16:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25e43dd8cd9e8df003eab83d5aa39480d5ed52e17e5a5f20137f1d4a19dd34de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0ddc2f51316b31026769cf6672e4d775d7617378edeed0df7ea35c7b1563dbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:50:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:50:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25e43dd8cd9e8df003eab83d5aa39480d5ed52e17e5a5f20137f1d4a19dd34de"} {"level":"info","ts":"2026-07-24T16:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5aeffe8621f21d3f3ce127acb9fcd24badc95a166e893b1e6d41ed10ce12e2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:50:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:50:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5aeffe8621f21d3f3ce127acb9fcd24badc95a166e893b1e6d41ed10ce12e2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3"} {"level":"info","ts":"2026-07-24T16:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5aeffe8621f21d3f3ce127acb9fcd24badc95a166e893b1e6d41ed10ce12e2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5f7e43b9930f08a63a154efdc71eea032e11b7c401d5d1becc38657482bad87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35525b1110e2bcbf2641063df043e43ebbc04ab0c82fa801354b8c5fae30debe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"589d2ecdc82b8822b892a146b449d346cc815e244b62add52b7a5a27f8f8ce60","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab38af1ebba7afb1bbe00772f652cc39e698dcc174beb38b14eddb5a04d636b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4db0c156a24e5ba3308046cf340c73e8fde3b46baf812a6a4ca6072d4683b2a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be6f9e35a81ecca33c1660f56cf36776e93f0d2e5fd0ce2132e268b20c148dc4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ce769eb6868c94fd0f621fdf44d11412f2c9f961b9c669f7ad7f22fc6c91269","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25e43dd8cd9e8df003eab83d5aa39480d5ed52e17e5a5f20137f1d4a19dd34de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5aeffe8621f21d3f3ce127acb9fcd24badc95a166e893b1e6d41ed10ce12e2b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:50:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5aeffe8621f21d3f3ce127acb9fcd24badc95a166e893b1e6d41ed10ce12e2b"} {"level":"info","ts":"2026-07-24T16:50:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bbd1ece8-a1ba-4c58-bf70-12f91bbd3444","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:56864","PortSpecifier":{"PortValue":56864}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bbd1ece8-a1ba-4c58-bf70-12f91bbd3444","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a65dee.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T16:50:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bbd1ece8-a1ba-4c58-bf70-12f91bbd3444","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:56864","PortSpecifier":{"PortValue":56864}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784911836,"nanos":823712760},"http":{"id":"bbd1ece8-a1ba-4c58-bf70-12f91bbd3444","method":"POST","headers":{":authority":"e2e-shared-a-a65dee.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T16:50:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bbd1ece8-a1ba-4c58-bf70-12f91bbd3444","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T16:50:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bbd1ece8-a1ba-4c58-bf70-12f91bbd3444","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c6920799-9c3c-48b3-a3e6-1c1556efc9c4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=515021ea-127d-4968-9b2f-4957a9e43ba5"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cf20df43e4ca"]}} {"level":"debug","ts":"2026-07-24T16:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bbd1ece8-a1ba-4c58-bf70-12f91bbd3444","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cf20df43e4ca"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=515021ea-127d-4968-9b2f-4957a9e43ba5"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c6920799-9c3c-48b3-a3e6-1c1556efc9c4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c149b09b5b073bc00127c50664a04d6254286b8a8aa6d04b02836fb739c7fca2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.74:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a65dee.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T16:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bbd1ece8-a1ba-4c58-bf70-12f91bbd3444","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bbd1ece8-a1ba-4c58-bf70-12f91bbd3444","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bbd1ece8-a1ba-4c58-bf70-12f91bbd3444","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a65dee/sub-test-model-a65dee\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a65dee/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:50:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bbd1ece8-a1ba-4c58-bf70-12f91bbd3444","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T16:50:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bbd1ece8-a1ba-4c58-bf70-12f91bbd3444","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T16:50:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bbd1ece8-a1ba-4c58-bf70-12f91bbd3444","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T16:50:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bbd1ece8-a1ba-4c58-bf70-12f91bbd3444","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T16:50:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bbd1ece8-a1ba-4c58-bf70-12f91bbd3444","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T16:50:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d30f829e-450f-4d72-ac63-35ffa64a2412","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:39434","PortSpecifier":{"PortValue":39434}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d30f829e-450f-4d72-ac63-35ffa64a2412","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a29da6.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T16:50:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d30f829e-450f-4d72-ac63-35ffa64a2412","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:39434","PortSpecifier":{"PortValue":39434}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784911836,"nanos":866310268},"http":{"id":"d30f829e-450f-4d72-ac63-35ffa64a2412","method":"POST","headers":{":authority":"e2e-shared-b-a29da6.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T16:50:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d30f829e-450f-4d72-ac63-35ffa64a2412","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T16:50:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d30f829e-450f-4d72-ac63-35ffa64a2412","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c6920799-9c3c-48b3-a3e6-1c1556efc9c4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=515021ea-127d-4968-9b2f-4957a9e43ba5"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cf20df43e4ca"]}} {"level":"debug","ts":"2026-07-24T16:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d30f829e-450f-4d72-ac63-35ffa64a2412","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cf20df43e4ca"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=515021ea-127d-4968-9b2f-4957a9e43ba5"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c6920799-9c3c-48b3-a3e6-1c1556efc9c4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0859bd43ff0f301a33f8370a4dcf63821f0f9dd8b97c20e1723b59edc332fe5d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a29da6.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T16:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d30f829e-450f-4d72-ac63-35ffa64a2412","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d30f829e-450f-4d72-ac63-35ffa64a2412","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d30f829e-450f-4d72-ac63-35ffa64a2412","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a29da6/sub-test-model-a29da6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a29da6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:50:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d30f829e-450f-4d72-ac63-35ffa64a2412","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T16:50:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d30f829e-450f-4d72-ac63-35ffa64a2412","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T16:50:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d30f829e-450f-4d72-ac63-35ffa64a2412","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T16:50:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d30f829e-450f-4d72-ac63-35ffa64a2412","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T16:50:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d30f829e-450f-4d72-ac63-35ffa64a2412","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T16:50:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5441d494-eb1e-4dcf-8c0e-90defb5c4bba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:56870","PortSpecifier":{"PortValue":56870}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5441d494-eb1e-4dcf-8c0e-90defb5c4bba","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-a65dee.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T16:50:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5441d494-eb1e-4dcf-8c0e-90defb5c4bba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:56870","PortSpecifier":{"PortValue":56870}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784911836,"nanos":915739887},"http":{"id":"5441d494-eb1e-4dcf-8c0e-90defb5c4bba","method":"GET","headers":{":authority":"e2e-shared-a-a65dee.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T16:50:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5441d494-eb1e-4dcf-8c0e-90defb5c4bba","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-8siRvpcIRzzFBHBE_PvXHsXanHa3d5aH5I855SmWhkuUhPzFgC7njpUDMpKU"} {"level":"debug","ts":"2026-07-24T16:50:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5441d494-eb1e-4dcf-8c0e-90defb5c4bba","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-8siRvpcIRzzFBHBE_PvXHsXanHa3d5aH5I855SmWhkuUhPzFgC7njpUDMpKU\"}"} {"level":"debug","ts":"2026-07-24T16:50:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5441d494-eb1e-4dcf-8c0e-90defb5c4bba","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a312b0a7-03b6-4603-8c78-f8aa47b01a06","keyName":"e2e-sub-iso-43e969","subscription":"e2e-a-only-29eba7","tenant":"e2e-shared-a-a65dee","userId":"a312b0a7-03b6-4603-8c78-f8aa47b01a06","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T16:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5441d494-eb1e-4dcf-8c0e-90defb5c4bba","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T16:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5441d494-eb1e-4dcf-8c0e-90defb5c4bba","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5441d494-eb1e-4dcf-8c0e-90defb5c4bba","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5441d494-eb1e-4dcf-8c0e-90defb5c4bba","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a65dee/sub-test-model-a65dee\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a65dee/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:50:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5441d494-eb1e-4dcf-8c0e-90defb5c4bba","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-24T16:50:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5441d494-eb1e-4dcf-8c0e-90defb5c4bba","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T16:50:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5441d494-eb1e-4dcf-8c0e-90defb5c4bba","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-29eba7"} {"level":"debug","ts":"2026-07-24T16:50:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5441d494-eb1e-4dcf-8c0e-90defb5c4bba","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T16:50:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5441d494-eb1e-4dcf-8c0e-90defb5c4bba","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T16:50:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5441d494-eb1e-4dcf-8c0e-90defb5c4bba","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T16:50:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"93209d99-661f-4326-a7ea-0413f3d39a0f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:39438","PortSpecifier":{"PortValue":39438}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"93209d99-661f-4326-a7ea-0413f3d39a0f","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-a29da6.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T16:50:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"93209d99-661f-4326-a7ea-0413f3d39a0f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:39438","PortSpecifier":{"PortValue":39438}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784911836,"nanos":959981317},"http":{"id":"93209d99-661f-4326-a7ea-0413f3d39a0f","method":"GET","headers":{":authority":"e2e-shared-b-a29da6.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T16:50:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"93209d99-661f-4326-a7ea-0413f3d39a0f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1J2W0skxqF5NgKOXI_iSUIeFBvODLxenSDsE9kDHTR0tPZRn5LODTB2Bz9oXp"} {"level":"debug","ts":"2026-07-24T16:50:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"93209d99-661f-4326-a7ea-0413f3d39a0f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-a29da6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1J2W0skxqF5NgKOXI_iSUIeFBvODLxenSDsE9kDHTR0tPZRn5LODTB2Bz9oXp\"}"} {"level":"debug","ts":"2026-07-24T16:50:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"93209d99-661f-4326-a7ea-0413f3d39a0f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-a29da6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9048f704-85f0-425c-a0c6-fb7800fe5470","keyName":"e2e-sub-iso-d188ad","subscription":"e2e-b-only-29eba7","tenant":"e2e-shared-b-a29da6","userId":"9048f704-85f0-425c-a0c6-fb7800fe5470","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T16:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"93209d99-661f-4326-a7ea-0413f3d39a0f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T16:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93209d99-661f-4326-a7ea-0413f3d39a0f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93209d99-661f-4326-a7ea-0413f3d39a0f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:50:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93209d99-661f-4326-a7ea-0413f3d39a0f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a29da6/sub-test-model-a29da6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a29da6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:50:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"93209d99-661f-4326-a7ea-0413f3d39a0f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T16:50:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"93209d99-661f-4326-a7ea-0413f3d39a0f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-24T16:50:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"93209d99-661f-4326-a7ea-0413f3d39a0f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-29eba7"} {"level":"debug","ts":"2026-07-24T16:50:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"93209d99-661f-4326-a7ea-0413f3d39a0f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T16:50:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"93209d99-661f-4326-a7ea-0413f3d39a0f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T16:50:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"93209d99-661f-4326-a7ea-0413f3d39a0f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T16:50:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/baf253fd5cd411b1796be17e409b4d420349d23cf75ba83292fc9972ae7ffd3a"} {"level":"info","ts":"2026-07-24T16:50:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0ce769eb6868c94fd0f621fdf44d11412f2c9f961b9c669f7ad7f22fc6c91269"} {"level":"info","ts":"2026-07-24T16:50:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c149b09b5b073bc00127c50664a04d6254286b8a8aa6d04b02836fb739c7fca2"} {"level":"info","ts":"2026-07-24T16:50:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ab38af1ebba7afb1bbe00772f652cc39e698dcc174beb38b14eddb5a04d636b7"} {"level":"info","ts":"2026-07-24T16:50:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/81e9995ddd9f9c35264bed75e0221689f4a1913ca22359ec147216fb4c2cfb28"} {"level":"info","ts":"2026-07-24T16:50:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4db0c156a24e5ba3308046cf340c73e8fde3b46baf812a6a4ca6072d4683b2a1"} {"level":"info","ts":"2026-07-24T16:50:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/589d2ecdc82b8822b892a146b449d346cc815e244b62add52b7a5a27f8f8ce60"} {"level":"info","ts":"2026-07-24T16:50:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/82ad05da69d8be2975ed495d4a0cc6952a7e11a5b69225ec1cdab9df53c7ac65"} {"level":"info","ts":"2026-07-24T16:50:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e0bbcb710479288c0124cf6409bf5b281edd8e098cc3c9fed27d6c7667b84ab4"} {"level":"info","ts":"2026-07-24T16:50:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593"} {"level":"info","ts":"2026-07-24T16:50:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/25e43dd8cd9e8df003eab83d5aa39480d5ed52e17e5a5f20137f1d4a19dd34de"} {"level":"info","ts":"2026-07-24T16:50:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3"} {"level":"info","ts":"2026-07-24T16:50:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/35525b1110e2bcbf2641063df043e43ebbc04ab0c82fa801354b8c5fae30debe"} {"level":"info","ts":"2026-07-24T16:50:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f5f7e43b9930f08a63a154efdc71eea032e11b7c401d5d1becc38657482bad87"} {"level":"info","ts":"2026-07-24T16:50:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7e738ec1aeb0b33a0bb1b1f395a9862cd7cd86dd2caf45fbaa59e253ccfd7bf1"} {"level":"info","ts":"2026-07-24T16:50:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cb6dcdb6e9ea3355e02e59fd215e0620ddc0b79db1abeb9e70f4584d7488896c"} {"level":"info","ts":"2026-07-24T16:50:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/be6f9e35a81ecca33c1660f56cf36776e93f0d2e5fd0ce2132e268b20c148dc4"} {"level":"info","ts":"2026-07-24T16:50:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b5dd61f9f658ed51c3db0e379e6b514132961b5e5b082de1c1080d6e842b96c3"} {"level":"info","ts":"2026-07-24T16:50:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0859bd43ff0f301a33f8370a4dcf63821f0f9dd8b97c20e1723b59edc332fe5d"} {"level":"info","ts":"2026-07-24T16:50:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9ec4a1a20f711cb28992864c3e80ab8a3d4c337050c268a74ed98747f5385593"} {"level":"info","ts":"2026-07-24T16:50:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a0ddc2f51316b31026769cf6672e4d775d7617378edeed0df7ea35c7b1563dbe"} {"level":"info","ts":"2026-07-24T16:50:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455"} {"level":"info","ts":"2026-07-24T16:50:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b5aeffe8621f21d3f3ce127acb9fcd24badc95a166e893b1e6d41ed10ce12e2b"} {"level":"info","ts":"2026-07-24T16:50:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fd0fa93690c196e5c3835bb2e06063b0061574b3f5030a16c84fe0171579717b"} {"level":"debug","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4db0c156a24e5ba3308046cf340c73e8fde3b46baf812a6a4ca6072d4683b2a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:50:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:50:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4db0c156a24e5ba3308046cf340c73e8fde3b46baf812a6a4ca6072d4683b2a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4db0c156a24e5ba3308046cf340c73e8fde3b46baf812a6a4ca6072d4683b2a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4db0c156a24e5ba3308046cf340c73e8fde3b46baf812a6a4ca6072d4683b2a1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4db0c156a24e5ba3308046cf340c73e8fde3b46baf812a6a4ca6072d4683b2a1"} {"level":"debug","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4db0c156a24e5ba3308046cf340c73e8fde3b46baf812a6a4ca6072d4683b2a1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4db0c156a24e5ba3308046cf340c73e8fde3b46baf812a6a4ca6072d4683b2a1"} {"level":"debug","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4db0c156a24e5ba3308046cf340c73e8fde3b46baf812a6a4ca6072d4683b2a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:50:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:50:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4db0c156a24e5ba3308046cf340c73e8fde3b46baf812a6a4ca6072d4683b2a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4db0c156a24e5ba3308046cf340c73e8fde3b46baf812a6a4ca6072d4683b2a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4db0c156a24e5ba3308046cf340c73e8fde3b46baf812a6a4ca6072d4683b2a1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4db0c156a24e5ba3308046cf340c73e8fde3b46baf812a6a4ca6072d4683b2a1"} {"level":"debug","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"baf253fd5cd411b1796be17e409b4d420349d23cf75ba83292fc9972ae7ffd3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:50:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:50:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"baf253fd5cd411b1796be17e409b4d420349d23cf75ba83292fc9972ae7ffd3a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"baf253fd5cd411b1796be17e409b4d420349d23cf75ba83292fc9972ae7ffd3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:50:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:50:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/baf253fd5cd411b1796be17e409b4d420349d23cf75ba83292fc9972ae7ffd3a"} {"level":"info","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"baf253fd5cd411b1796be17e409b4d420349d23cf75ba83292fc9972ae7ffd3a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"baf253fd5cd411b1796be17e409b4d420349d23cf75ba83292fc9972ae7ffd3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:50:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:50:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"baf253fd5cd411b1796be17e409b4d420349d23cf75ba83292fc9972ae7ffd3a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"baf253fd5cd411b1796be17e409b4d420349d23cf75ba83292fc9972ae7ffd3a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"baf253fd5cd411b1796be17e409b4d420349d23cf75ba83292fc9972ae7ffd3a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"baf253fd5cd411b1796be17e409b4d420349d23cf75ba83292fc9972ae7ffd3a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/baf253fd5cd411b1796be17e409b4d420349d23cf75ba83292fc9972ae7ffd3a"} {"level":"info","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/baf253fd5cd411b1796be17e409b4d420349d23cf75ba83292fc9972ae7ffd3a"} {"level":"debug","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd0fa93690c196e5c3835bb2e06063b0061574b3f5030a16c84fe0171579717b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:50:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:50:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd0fa93690c196e5c3835bb2e06063b0061574b3f5030a16c84fe0171579717b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd0fa93690c196e5c3835bb2e06063b0061574b3f5030a16c84fe0171579717b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"baf253fd5cd411b1796be17e409b4d420349d23cf75ba83292fc9972ae7ffd3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:50:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:50:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["baf253fd5cd411b1796be17e409b4d420349d23cf75ba83292fc9972ae7ffd3a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd0fa93690c196e5c3835bb2e06063b0061574b3f5030a16c84fe0171579717b"} {"level":"info","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"baf253fd5cd411b1796be17e409b4d420349d23cf75ba83292fc9972ae7ffd3a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd0fa93690c196e5c3835bb2e06063b0061574b3f5030a16c84fe0171579717b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"baf253fd5cd411b1796be17e409b4d420349d23cf75ba83292fc9972ae7ffd3a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd0fa93690c196e5c3835bb2e06063b0061574b3f5030a16c84fe0171579717b"} {"level":"debug","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd0fa93690c196e5c3835bb2e06063b0061574b3f5030a16c84fe0171579717b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:50:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:50:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd0fa93690c196e5c3835bb2e06063b0061574b3f5030a16c84fe0171579717b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/baf253fd5cd411b1796be17e409b4d420349d23cf75ba83292fc9972ae7ffd3a"} {"level":"info","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd0fa93690c196e5c3835bb2e06063b0061574b3f5030a16c84fe0171579717b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd0fa93690c196e5c3835bb2e06063b0061574b3f5030a16c84fe0171579717b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd0fa93690c196e5c3835bb2e06063b0061574b3f5030a16c84fe0171579717b"} {"level":"debug","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:50:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:50:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25e43dd8cd9e8df003eab83d5aa39480d5ed52e17e5a5f20137f1d4a19dd34de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:50:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:50:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593"} {"level":"info","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25e43dd8cd9e8df003eab83d5aa39480d5ed52e17e5a5f20137f1d4a19dd34de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:50:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:50:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25e43dd8cd9e8df003eab83d5aa39480d5ed52e17e5a5f20137f1d4a19dd34de"} {"level":"info","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25e43dd8cd9e8df003eab83d5aa39480d5ed52e17e5a5f20137f1d4a19dd34de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:50:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:50:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25e43dd8cd9e8df003eab83d5aa39480d5ed52e17e5a5f20137f1d4a19dd34de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25e43dd8cd9e8df003eab83d5aa39480d5ed52e17e5a5f20137f1d4a19dd34de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:50:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:50:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593"} {"level":"info","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25e43dd8cd9e8df003eab83d5aa39480d5ed52e17e5a5f20137f1d4a19dd34de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:50:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:50:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25e43dd8cd9e8df003eab83d5aa39480d5ed52e17e5a5f20137f1d4a19dd34de"} {"level":"info","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25e43dd8cd9e8df003eab83d5aa39480d5ed52e17e5a5f20137f1d4a19dd34de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25e43dd8cd9e8df003eab83d5aa39480d5ed52e17e5a5f20137f1d4a19dd34de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:50:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:50:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25e43dd8cd9e8df003eab83d5aa39480d5ed52e17e5a5f20137f1d4a19dd34de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25e43dd8cd9e8df003eab83d5aa39480d5ed52e17e5a5f20137f1d4a19dd34de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25e43dd8cd9e8df003eab83d5aa39480d5ed52e17e5a5f20137f1d4a19dd34de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:50:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:50:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25e43dd8cd9e8df003eab83d5aa39480d5ed52e17e5a5f20137f1d4a19dd34de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593"} {"level":"error","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"25e43dd8cd9e8df003eab83d5aa39480d5ed52e17e5a5f20137f1d4a19dd34de","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"25e43dd8cd9e8df003eab83d5aa39480d5ed52e17e5a5f20137f1d4a19dd34de\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25e43dd8cd9e8df003eab83d5aa39480d5ed52e17e5a5f20137f1d4a19dd34de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:50:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:50:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25e43dd8cd9e8df003eab83d5aa39480d5ed52e17e5a5f20137f1d4a19dd34de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25e43dd8cd9e8df003eab83d5aa39480d5ed52e17e5a5f20137f1d4a19dd34de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:50:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:50:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"25e43dd8cd9e8df003eab83d5aa39480d5ed52e17e5a5f20137f1d4a19dd34de","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"25e43dd8cd9e8df003eab83d5aa39480d5ed52e17e5a5f20137f1d4a19dd34de\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:50:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:50:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25e43dd8cd9e8df003eab83d5aa39480d5ed52e17e5a5f20137f1d4a19dd34de"} {"level":"info","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25e43dd8cd9e8df003eab83d5aa39480d5ed52e17e5a5f20137f1d4a19dd34de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25e43dd8cd9e8df003eab83d5aa39480d5ed52e17e5a5f20137f1d4a19dd34de"} {"level":"debug","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25e43dd8cd9e8df003eab83d5aa39480d5ed52e17e5a5f20137f1d4a19dd34de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:50:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:50:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25e43dd8cd9e8df003eab83d5aa39480d5ed52e17e5a5f20137f1d4a19dd34de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593"} {"level":"info","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25e43dd8cd9e8df003eab83d5aa39480d5ed52e17e5a5f20137f1d4a19dd34de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25e43dd8cd9e8df003eab83d5aa39480d5ed52e17e5a5f20137f1d4a19dd34de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:50:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:50:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25e43dd8cd9e8df003eab83d5aa39480d5ed52e17e5a5f20137f1d4a19dd34de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5dd61f9f658ed51c3db0e379e6b514132961b5e5b082de1c1080d6e842b96c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:50:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:50:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5dd61f9f658ed51c3db0e379e6b514132961b5e5b082de1c1080d6e842b96c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25e43dd8cd9e8df003eab83d5aa39480d5ed52e17e5a5f20137f1d4a19dd34de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:50:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:50:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25e43dd8cd9e8df003eab83d5aa39480d5ed52e17e5a5f20137f1d4a19dd34de"} {"level":"info","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5dd61f9f658ed51c3db0e379e6b514132961b5e5b082de1c1080d6e842b96c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:50:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:50:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5dd61f9f658ed51c3db0e379e6b514132961b5e5b082de1c1080d6e842b96c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25e43dd8cd9e8df003eab83d5aa39480d5ed52e17e5a5f20137f1d4a19dd34de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:50:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:50:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25e43dd8cd9e8df003eab83d5aa39480d5ed52e17e5a5f20137f1d4a19dd34de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5dd61f9f658ed51c3db0e379e6b514132961b5e5b082de1c1080d6e842b96c3"} {"level":"info","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25e43dd8cd9e8df003eab83d5aa39480d5ed52e17e5a5f20137f1d4a19dd34de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:50:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:50:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5dd61f9f658ed51c3db0e379e6b514132961b5e5b082de1c1080d6e842b96c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:50:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:50:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5dd61f9f658ed51c3db0e379e6b514132961b5e5b082de1c1080d6e842b96c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3"} {"level":"info","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5dd61f9f658ed51c3db0e379e6b514132961b5e5b082de1c1080d6e842b96c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25e43dd8cd9e8df003eab83d5aa39480d5ed52e17e5a5f20137f1d4a19dd34de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:50:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:50:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25e43dd8cd9e8df003eab83d5aa39480d5ed52e17e5a5f20137f1d4a19dd34de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:50:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:50:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25e43dd8cd9e8df003eab83d5aa39480d5ed52e17e5a5f20137f1d4a19dd34de"} {"level":"info","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5dd61f9f658ed51c3db0e379e6b514132961b5e5b082de1c1080d6e842b96c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:50:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:50:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5dd61f9f658ed51c3db0e379e6b514132961b5e5b082de1c1080d6e842b96c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25e43dd8cd9e8df003eab83d5aa39480d5ed52e17e5a5f20137f1d4a19dd34de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:50:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:50:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25e43dd8cd9e8df003eab83d5aa39480d5ed52e17e5a5f20137f1d4a19dd34de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5dd61f9f658ed51c3db0e379e6b514132961b5e5b082de1c1080d6e842b96c3"} {"level":"info","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25e43dd8cd9e8df003eab83d5aa39480d5ed52e17e5a5f20137f1d4a19dd34de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:50:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:50:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5dd61f9f658ed51c3db0e379e6b514132961b5e5b082de1c1080d6e842b96c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:50:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:50:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5dd61f9f658ed51c3db0e379e6b514132961b5e5b082de1c1080d6e842b96c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5dd61f9f658ed51c3db0e379e6b514132961b5e5b082de1c1080d6e842b96c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25e43dd8cd9e8df003eab83d5aa39480d5ed52e17e5a5f20137f1d4a19dd34de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5dd61f9f658ed51c3db0e379e6b514132961b5e5b082de1c1080d6e842b96c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c149b09b5b073bc00127c50664a04d6254286b8a8aa6d04b02836fb739c7fca2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:50:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:50:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3"} {"level":"info","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c149b09b5b073bc00127c50664a04d6254286b8a8aa6d04b02836fb739c7fca2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:50:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:50:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25e43dd8cd9e8df003eab83d5aa39480d5ed52e17e5a5f20137f1d4a19dd34de"} {"level":"info","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c149b09b5b073bc00127c50664a04d6254286b8a8aa6d04b02836fb739c7fca2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c149b09b5b073bc00127c50664a04d6254286b8a8aa6d04b02836fb739c7fca2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5dd61f9f658ed51c3db0e379e6b514132961b5e5b082de1c1080d6e842b96c3"} {"level":"debug","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c149b09b5b073bc00127c50664a04d6254286b8a8aa6d04b02836fb739c7fca2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:50:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:50:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c149b09b5b073bc00127c50664a04d6254286b8a8aa6d04b02836fb739c7fca2"} {"level":"info","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c149b09b5b073bc00127c50664a04d6254286b8a8aa6d04b02836fb739c7fca2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c149b09b5b073bc00127c50664a04d6254286b8a8aa6d04b02836fb739c7fca2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:50:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:50:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c149b09b5b073bc00127c50664a04d6254286b8a8aa6d04b02836fb739c7fca2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3"} {"level":"info","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c149b09b5b073bc00127c50664a04d6254286b8a8aa6d04b02836fb739c7fca2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c149b09b5b073bc00127c50664a04d6254286b8a8aa6d04b02836fb739c7fca2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:50:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:50:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c149b09b5b073bc00127c50664a04d6254286b8a8aa6d04b02836fb739c7fca2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c149b09b5b073bc00127c50664a04d6254286b8a8aa6d04b02836fb739c7fca2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c149b09b5b073bc00127c50664a04d6254286b8a8aa6d04b02836fb739c7fca2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c149b09b5b073bc00127c50664a04d6254286b8a8aa6d04b02836fb739c7fca2"} {"level":"debug","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c149b09b5b073bc00127c50664a04d6254286b8a8aa6d04b02836fb739c7fca2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c149b09b5b073bc00127c50664a04d6254286b8a8aa6d04b02836fb739c7fca2"} {"level":"debug","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c149b09b5b073bc00127c50664a04d6254286b8a8aa6d04b02836fb739c7fca2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:50:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:50:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c149b09b5b073bc00127c50664a04d6254286b8a8aa6d04b02836fb739c7fca2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c149b09b5b073bc00127c50664a04d6254286b8a8aa6d04b02836fb739c7fca2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c149b09b5b073bc00127c50664a04d6254286b8a8aa6d04b02836fb739c7fca2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ce769eb6868c94fd0f621fdf44d11412f2c9f961b9c669f7ad7f22fc6c91269","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:50:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:50:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c149b09b5b073bc00127c50664a04d6254286b8a8aa6d04b02836fb739c7fca2"} {"level":"info","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ce769eb6868c94fd0f621fdf44d11412f2c9f961b9c669f7ad7f22fc6c91269","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ce769eb6868c94fd0f621fdf44d11412f2c9f961b9c669f7ad7f22fc6c91269","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:50:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:50:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ce769eb6868c94fd0f621fdf44d11412f2c9f961b9c669f7ad7f22fc6c91269"} {"level":"info","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ce769eb6868c94fd0f621fdf44d11412f2c9f961b9c669f7ad7f22fc6c91269","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82ad05da69d8be2975ed495d4a0cc6952a7e11a5b69225ec1cdab9df53c7ac65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:50:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:50:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82ad05da69d8be2975ed495d4a0cc6952a7e11a5b69225ec1cdab9df53c7ac65"} {"level":"info","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82ad05da69d8be2975ed495d4a0cc6952a7e11a5b69225ec1cdab9df53c7ac65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ce769eb6868c94fd0f621fdf44d11412f2c9f961b9c669f7ad7f22fc6c91269","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82ad05da69d8be2975ed495d4a0cc6952a7e11a5b69225ec1cdab9df53c7ac65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:50:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:50:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["82ad05da69d8be2975ed495d4a0cc6952a7e11a5b69225ec1cdab9df53c7ac65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82ad05da69d8be2975ed495d4a0cc6952a7e11a5b69225ec1cdab9df53c7ac65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82ad05da69d8be2975ed495d4a0cc6952a7e11a5b69225ec1cdab9df53c7ac65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:50:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:50:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["82ad05da69d8be2975ed495d4a0cc6952a7e11a5b69225ec1cdab9df53c7ac65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ce769eb6868c94fd0f621fdf44d11412f2c9f961b9c669f7ad7f22fc6c91269"} {"level":"error","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"82ad05da69d8be2975ed495d4a0cc6952a7e11a5b69225ec1cdab9df53c7ac65","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"82ad05da69d8be2975ed495d4a0cc6952a7e11a5b69225ec1cdab9df53c7ac65\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ce769eb6868c94fd0f621fdf44d11412f2c9f961b9c669f7ad7f22fc6c91269","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:50:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:50:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ce769eb6868c94fd0f621fdf44d11412f2c9f961b9c669f7ad7f22fc6c91269"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ce769eb6868c94fd0f621fdf44d11412f2c9f961b9c669f7ad7f22fc6c91269","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82ad05da69d8be2975ed495d4a0cc6952a7e11a5b69225ec1cdab9df53c7ac65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:50:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:50:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82ad05da69d8be2975ed495d4a0cc6952a7e11a5b69225ec1cdab9df53c7ac65"} {"level":"info","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82ad05da69d8be2975ed495d4a0cc6952a7e11a5b69225ec1cdab9df53c7ac65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ce769eb6868c94fd0f621fdf44d11412f2c9f961b9c669f7ad7f22fc6c91269","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:50:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:50:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ce769eb6868c94fd0f621fdf44d11412f2c9f961b9c669f7ad7f22fc6c91269","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82ad05da69d8be2975ed495d4a0cc6952a7e11a5b69225ec1cdab9df53c7ac65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:50:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:50:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["82ad05da69d8be2975ed495d4a0cc6952a7e11a5b69225ec1cdab9df53c7ac65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ce769eb6868c94fd0f621fdf44d11412f2c9f961b9c669f7ad7f22fc6c91269"} {"level":"info","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82ad05da69d8be2975ed495d4a0cc6952a7e11a5b69225ec1cdab9df53c7ac65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5aeffe8621f21d3f3ce127acb9fcd24badc95a166e893b1e6d41ed10ce12e2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:50:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:50:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5aeffe8621f21d3f3ce127acb9fcd24badc95a166e893b1e6d41ed10ce12e2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ce769eb6868c94fd0f621fdf44d11412f2c9f961b9c669f7ad7f22fc6c91269","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:50:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:50:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ce769eb6868c94fd0f621fdf44d11412f2c9f961b9c669f7ad7f22fc6c91269"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82ad05da69d8be2975ed495d4a0cc6952a7e11a5b69225ec1cdab9df53c7ac65"} {"level":"info","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ce769eb6868c94fd0f621fdf44d11412f2c9f961b9c669f7ad7f22fc6c91269","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be6f9e35a81ecca33c1660f56cf36776e93f0d2e5fd0ce2132e268b20c148dc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:50:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:50:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5aeffe8621f21d3f3ce127acb9fcd24badc95a166e893b1e6d41ed10ce12e2b"} {"level":"info","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be6f9e35a81ecca33c1660f56cf36776e93f0d2e5fd0ce2132e268b20c148dc4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82ad05da69d8be2975ed495d4a0cc6952a7e11a5b69225ec1cdab9df53c7ac65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5aeffe8621f21d3f3ce127acb9fcd24badc95a166e893b1e6d41ed10ce12e2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:50:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:50:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5aeffe8621f21d3f3ce127acb9fcd24badc95a166e893b1e6d41ed10ce12e2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5aeffe8621f21d3f3ce127acb9fcd24badc95a166e893b1e6d41ed10ce12e2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ce769eb6868c94fd0f621fdf44d11412f2c9f961b9c669f7ad7f22fc6c91269","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:50:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:50:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ce769eb6868c94fd0f621fdf44d11412f2c9f961b9c669f7ad7f22fc6c91269"} {"level":"info","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ce769eb6868c94fd0f621fdf44d11412f2c9f961b9c669f7ad7f22fc6c91269","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be6f9e35a81ecca33c1660f56cf36776e93f0d2e5fd0ce2132e268b20c148dc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:50:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:50:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be6f9e35a81ecca33c1660f56cf36776e93f0d2e5fd0ce2132e268b20c148dc4"} {"level":"info","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be6f9e35a81ecca33c1660f56cf36776e93f0d2e5fd0ce2132e268b20c148dc4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5aeffe8621f21d3f3ce127acb9fcd24badc95a166e893b1e6d41ed10ce12e2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ce769eb6868c94fd0f621fdf44d11412f2c9f961b9c669f7ad7f22fc6c91269","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:50:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:50:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ce769eb6868c94fd0f621fdf44d11412f2c9f961b9c669f7ad7f22fc6c91269"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82ad05da69d8be2975ed495d4a0cc6952a7e11a5b69225ec1cdab9df53c7ac65"} {"level":"info","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5aeffe8621f21d3f3ce127acb9fcd24badc95a166e893b1e6d41ed10ce12e2b"} {"level":"info","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ce769eb6868c94fd0f621fdf44d11412f2c9f961b9c669f7ad7f22fc6c91269"} {"level":"info","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ce769eb6868c94fd0f621fdf44d11412f2c9f961b9c669f7ad7f22fc6c91269","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0859bd43ff0f301a33f8370a4dcf63821f0f9dd8b97c20e1723b59edc332fe5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:50:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:50:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0859bd43ff0f301a33f8370a4dcf63821f0f9dd8b97c20e1723b59edc332fe5d"} {"level":"info","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e738ec1aeb0b33a0bb1b1f395a9862cd7cd86dd2caf45fbaa59e253ccfd7bf1"} {"level":"info","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0859bd43ff0f301a33f8370a4dcf63821f0f9dd8b97c20e1723b59edc332fe5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e738ec1aeb0b33a0bb1b1f395a9862cd7cd86dd2caf45fbaa59e253ccfd7bf1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:50:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:50:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e738ec1aeb0b33a0bb1b1f395a9862cd7cd86dd2caf45fbaa59e253ccfd7bf1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be6f9e35a81ecca33c1660f56cf36776e93f0d2e5fd0ce2132e268b20c148dc4"} {"level":"info","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ce769eb6868c94fd0f621fdf44d11412f2c9f961b9c669f7ad7f22fc6c91269"} {"level":"info","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ec4a1a20f711cb28992864c3e80ab8a3d4c337050c268a74ed98747f5385593"} {"level":"info","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e738ec1aeb0b33a0bb1b1f395a9862cd7cd86dd2caf45fbaa59e253ccfd7bf1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be6f9e35a81ecca33c1660f56cf36776e93f0d2e5fd0ce2132e268b20c148dc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:50:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:50:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be6f9e35a81ecca33c1660f56cf36776e93f0d2e5fd0ce2132e268b20c148dc4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455"} {"level":"info","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0859bd43ff0f301a33f8370a4dcf63821f0f9dd8b97c20e1723b59edc332fe5d"} {"level":"info","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0bbcb710479288c0124cf6409bf5b281edd8e098cc3c9fed27d6c7667b84ab4"} {"level":"info","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be6f9e35a81ecca33c1660f56cf36776e93f0d2e5fd0ce2132e268b20c148dc4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ce769eb6868c94fd0f621fdf44d11412f2c9f961b9c669f7ad7f22fc6c91269","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ec4a1a20f711cb28992864c3e80ab8a3d4c337050c268a74ed98747f5385593","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:50:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:50:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ec4a1a20f711cb28992864c3e80ab8a3d4c337050c268a74ed98747f5385593"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e738ec1aeb0b33a0bb1b1f395a9862cd7cd86dd2caf45fbaa59e253ccfd7bf1"} {"level":"info","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb6dcdb6e9ea3355e02e59fd215e0620ddc0b79db1abeb9e70f4584d7488896c"} {"level":"info","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ec4a1a20f711cb28992864c3e80ab8a3d4c337050c268a74ed98747f5385593","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:50:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:50:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be6f9e35a81ecca33c1660f56cf36776e93f0d2e5fd0ce2132e268b20c148dc4"} {"level":"info","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5f7e43b9930f08a63a154efdc71eea032e11b7c401d5d1becc38657482bad87"} {"level":"info","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0859bd43ff0f301a33f8370a4dcf63821f0f9dd8b97c20e1723b59edc332fe5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:50:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:50:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0859bd43ff0f301a33f8370a4dcf63821f0f9dd8b97c20e1723b59edc332fe5d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0ddc2f51316b31026769cf6672e4d775d7617378edeed0df7ea35c7b1563dbe"} {"level":"info","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ec4a1a20f711cb28992864c3e80ab8a3d4c337050c268a74ed98747f5385593"} {"level":"info","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35525b1110e2bcbf2641063df043e43ebbc04ab0c82fa801354b8c5fae30debe"} {"level":"info","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0859bd43ff0f301a33f8370a4dcf63821f0f9dd8b97c20e1723b59edc332fe5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0bbcb710479288c0124cf6409bf5b281edd8e098cc3c9fed27d6c7667b84ab4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:50:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:50:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e0bbcb710479288c0124cf6409bf5b281edd8e098cc3c9fed27d6c7667b84ab4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/589d2ecdc82b8822b892a146b449d346cc815e244b62add52b7a5a27f8f8ce60"} {"level":"info","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0bbcb710479288c0124cf6409bf5b281edd8e098cc3c9fed27d6c7667b84ab4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e738ec1aeb0b33a0bb1b1f395a9862cd7cd86dd2caf45fbaa59e253ccfd7bf1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb6dcdb6e9ea3355e02e59fd215e0620ddc0b79db1abeb9e70f4584d7488896c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:50:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:50:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb6dcdb6e9ea3355e02e59fd215e0620ddc0b79db1abeb9e70f4584d7488896c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455"} {"level":"info","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb6dcdb6e9ea3355e02e59fd215e0620ddc0b79db1abeb9e70f4584d7488896c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be6f9e35a81ecca33c1660f56cf36776e93f0d2e5fd0ce2132e268b20c148dc4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5f7e43b9930f08a63a154efdc71eea032e11b7c401d5d1becc38657482bad87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:50:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:50:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5f7e43b9930f08a63a154efdc71eea032e11b7c401d5d1becc38657482bad87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81e9995ddd9f9c35264bed75e0221689f4a1913ca22359ec147216fb4c2cfb28"} {"level":"info","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab38af1ebba7afb1bbe00772f652cc39e698dcc174beb38b14eddb5a04d636b7"} {"level":"info","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5f7e43b9930f08a63a154efdc71eea032e11b7c401d5d1becc38657482bad87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0ddc2f51316b31026769cf6672e4d775d7617378edeed0df7ea35c7b1563dbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:50:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:50:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0ddc2f51316b31026769cf6672e4d775d7617378edeed0df7ea35c7b1563dbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0859bd43ff0f301a33f8370a4dcf63821f0f9dd8b97c20e1723b59edc332fe5d"} {"level":"info","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0bbcb710479288c0124cf6409bf5b281edd8e098cc3c9fed27d6c7667b84ab4"} {"level":"info","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb6dcdb6e9ea3355e02e59fd215e0620ddc0b79db1abeb9e70f4584d7488896c"} {"level":"info","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0ddc2f51316b31026769cf6672e4d775d7617378edeed0df7ea35c7b1563dbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ec4a1a20f711cb28992864c3e80ab8a3d4c337050c268a74ed98747f5385593","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35525b1110e2bcbf2641063df043e43ebbc04ab0c82fa801354b8c5fae30debe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:50:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:50:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35525b1110e2bcbf2641063df043e43ebbc04ab0c82fa801354b8c5fae30debe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5f7e43b9930f08a63a154efdc71eea032e11b7c401d5d1becc38657482bad87"} {"level":"info","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0ddc2f51316b31026769cf6672e4d775d7617378edeed0df7ea35c7b1563dbe"} {"level":"info","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35525b1110e2bcbf2641063df043e43ebbc04ab0c82fa801354b8c5fae30debe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"589d2ecdc82b8822b892a146b449d346cc815e244b62add52b7a5a27f8f8ce60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:50:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:50:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["589d2ecdc82b8822b892a146b449d346cc815e244b62add52b7a5a27f8f8ce60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35525b1110e2bcbf2641063df043e43ebbc04ab0c82fa801354b8c5fae30debe"} {"level":"info","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"589d2ecdc82b8822b892a146b449d346cc815e244b62add52b7a5a27f8f8ce60","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81e9995ddd9f9c35264bed75e0221689f4a1913ca22359ec147216fb4c2cfb28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:50:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:50:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81e9995ddd9f9c35264bed75e0221689f4a1913ca22359ec147216fb4c2cfb28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/589d2ecdc82b8822b892a146b449d346cc815e244b62add52b7a5a27f8f8ce60"} {"level":"info","ts":"2026-07-24T16:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81e9995ddd9f9c35264bed75e0221689f4a1913ca22359ec147216fb4c2cfb28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab38af1ebba7afb1bbe00772f652cc39e698dcc174beb38b14eddb5a04d636b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:50:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:50:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab38af1ebba7afb1bbe00772f652cc39e698dcc174beb38b14eddb5a04d636b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81e9995ddd9f9c35264bed75e0221689f4a1913ca22359ec147216fb4c2cfb28"} {"level":"info","ts":"2026-07-24T16:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab38af1ebba7afb1bbe00772f652cc39e698dcc174beb38b14eddb5a04d636b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0859bd43ff0f301a33f8370a4dcf63821f0f9dd8b97c20e1723b59edc332fe5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0bbcb710479288c0124cf6409bf5b281edd8e098cc3c9fed27d6c7667b84ab4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb6dcdb6e9ea3355e02e59fd215e0620ddc0b79db1abeb9e70f4584d7488896c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5f7e43b9930f08a63a154efdc71eea032e11b7c401d5d1becc38657482bad87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0ddc2f51316b31026769cf6672e4d775d7617378edeed0df7ea35c7b1563dbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35525b1110e2bcbf2641063df043e43ebbc04ab0c82fa801354b8c5fae30debe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"589d2ecdc82b8822b892a146b449d346cc815e244b62add52b7a5a27f8f8ce60","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81e9995ddd9f9c35264bed75e0221689f4a1913ca22359ec147216fb4c2cfb28","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab38af1ebba7afb1bbe00772f652cc39e698dcc174beb38b14eddb5a04d636b7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab38af1ebba7afb1bbe00772f652cc39e698dcc174beb38b14eddb5a04d636b7"} {"level":"info","ts":"2026-07-24T16:50:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"50cbe58b-1127-421f-aa38-a8a384aeb27f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:39738","PortSpecifier":{"PortValue":39738}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"50cbe58b-1127-421f-aa38-a8a384aeb27f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a65dee.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T16:50:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"50cbe58b-1127-421f-aa38-a8a384aeb27f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:39738","PortSpecifier":{"PortValue":39738}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784911855,"nanos":385533927},"http":{"id":"50cbe58b-1127-421f-aa38-a8a384aeb27f","method":"POST","headers":{":authority":"e2e-shared-a-a65dee.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T16:50:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"50cbe58b-1127-421f-aa38-a8a384aeb27f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T16:50:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"50cbe58b-1127-421f-aa38-a8a384aeb27f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c6920799-9c3c-48b3-a3e6-1c1556efc9c4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=515021ea-127d-4968-9b2f-4957a9e43ba5"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cf20df43e4ca"]}} {"level":"debug","ts":"2026-07-24T16:50:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"50cbe58b-1127-421f-aa38-a8a384aeb27f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cf20df43e4ca"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=515021ea-127d-4968-9b2f-4957a9e43ba5"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c6920799-9c3c-48b3-a3e6-1c1556efc9c4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c149b09b5b073bc00127c50664a04d6254286b8a8aa6d04b02836fb739c7fca2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.74:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a65dee.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T16:50:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50cbe58b-1127-421f-aa38-a8a384aeb27f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:50:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50cbe58b-1127-421f-aa38-a8a384aeb27f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:50:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50cbe58b-1127-421f-aa38-a8a384aeb27f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a65dee/sub-test-model-a65dee\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a65dee/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:50:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"50cbe58b-1127-421f-aa38-a8a384aeb27f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T16:50:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50cbe58b-1127-421f-aa38-a8a384aeb27f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T16:50:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50cbe58b-1127-421f-aa38-a8a384aeb27f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-24T16:50:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"50cbe58b-1127-421f-aa38-a8a384aeb27f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T16:50:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"50cbe58b-1127-421f-aa38-a8a384aeb27f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T16:50:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f560402-04a9-4349-ac88-41a9325bdf80","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:54906","PortSpecifier":{"PortValue":54906}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5f560402-04a9-4349-ac88-41a9325bdf80","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a29da6.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T16:50:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f560402-04a9-4349-ac88-41a9325bdf80","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:54906","PortSpecifier":{"PortValue":54906}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784911855,"nanos":426518459},"http":{"id":"5f560402-04a9-4349-ac88-41a9325bdf80","method":"POST","headers":{":authority":"e2e-shared-b-a29da6.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T16:50:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5f560402-04a9-4349-ac88-41a9325bdf80","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T16:50:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5f560402-04a9-4349-ac88-41a9325bdf80","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c6920799-9c3c-48b3-a3e6-1c1556efc9c4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=515021ea-127d-4968-9b2f-4957a9e43ba5"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cf20df43e4ca"]}} {"level":"debug","ts":"2026-07-24T16:50:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5f560402-04a9-4349-ac88-41a9325bdf80","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cf20df43e4ca"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=515021ea-127d-4968-9b2f-4957a9e43ba5"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c6920799-9c3c-48b3-a3e6-1c1556efc9c4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0859bd43ff0f301a33f8370a4dcf63821f0f9dd8b97c20e1723b59edc332fe5d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a29da6.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T16:50:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f560402-04a9-4349-ac88-41a9325bdf80","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:50:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f560402-04a9-4349-ac88-41a9325bdf80","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:50:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f560402-04a9-4349-ac88-41a9325bdf80","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a29da6/sub-test-model-a29da6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a29da6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:50:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5f560402-04a9-4349-ac88-41a9325bdf80","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T16:50:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f560402-04a9-4349-ac88-41a9325bdf80","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T16:50:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f560402-04a9-4349-ac88-41a9325bdf80","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T16:50:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f560402-04a9-4349-ac88-41a9325bdf80","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T16:50:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f560402-04a9-4349-ac88-41a9325bdf80","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T16:50:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd166a02-8d13-4362-980b-06d589248db0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:39742","PortSpecifier":{"PortValue":39742}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fd166a02-8d13-4362-980b-06d589248db0","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-a65dee.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T16:50:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd166a02-8d13-4362-980b-06d589248db0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:39742","PortSpecifier":{"PortValue":39742}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784911855,"nanos":464129203},"http":{"id":"fd166a02-8d13-4362-980b-06d589248db0","method":"POST","headers":{":authority":"e2e-shared-a-a65dee.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T16:50:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fd166a02-8d13-4362-980b-06d589248db0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ttm2uwcxqxkF54k2_1uVScydbYZe9dqz3ILHchjxVi8tde98zwZQxr0Qkt2J"} {"level":"debug","ts":"2026-07-24T16:50:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fd166a02-8d13-4362-980b-06d589248db0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ttm2uwcxqxkF54k2_1uVScydbYZe9dqz3ILHchjxVi8tde98zwZQxr0Qkt2J\"}"} {"level":"debug","ts":"2026-07-24T16:50:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fd166a02-8d13-4362-980b-06d589248db0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"62a47e35-0493-436a-bab4-45f0fefc0ad8","keyName":"e2e-sub-iso-3243a1","subscription":"e2e-shared-sub-20569d","tenant":"e2e-shared-a-a65dee","userId":"62a47e35-0493-436a-bab4-45f0fefc0ad8","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T16:50:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fd166a02-8d13-4362-980b-06d589248db0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T16:50:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd166a02-8d13-4362-980b-06d589248db0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:50:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd166a02-8d13-4362-980b-06d589248db0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:50:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd166a02-8d13-4362-980b-06d589248db0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a65dee/sub-test-model-a65dee\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a65dee/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:50:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fd166a02-8d13-4362-980b-06d589248db0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-24T16:50:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd166a02-8d13-4362-980b-06d589248db0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T16:50:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd166a02-8d13-4362-980b-06d589248db0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T16:50:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd166a02-8d13-4362-980b-06d589248db0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-20569d"} {"level":"info","ts":"2026-07-24T16:50:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd166a02-8d13-4362-980b-06d589248db0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T16:50:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd166a02-8d13-4362-980b-06d589248db0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T16:50:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a918c9f0-3b6b-4c8c-b958-91ea024fac79","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:54922","PortSpecifier":{"PortValue":54922}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a918c9f0-3b6b-4c8c-b958-91ea024fac79","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-a29da6.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T16:50:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a918c9f0-3b6b-4c8c-b958-91ea024fac79","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:54922","PortSpecifier":{"PortValue":54922}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784911855,"nanos":494968143},"http":{"id":"a918c9f0-3b6b-4c8c-b958-91ea024fac79","method":"POST","headers":{":authority":"e2e-shared-b-a29da6.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T16:50:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a918c9f0-3b6b-4c8c-b958-91ea024fac79","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1bZouo2us2mTHWuMG_BXkkSQQ27rWlzuMag8tXVYY30B8ot0w6AjvIMCCKzOD"} {"level":"debug","ts":"2026-07-24T16:50:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a918c9f0-3b6b-4c8c-b958-91ea024fac79","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-a29da6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1bZouo2us2mTHWuMG_BXkkSQQ27rWlzuMag8tXVYY30B8ot0w6AjvIMCCKzOD\"}"} {"level":"debug","ts":"2026-07-24T16:50:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a918c9f0-3b6b-4c8c-b958-91ea024fac79","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-a29da6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1ff79d2d-fd3d-43c7-8bc1-9ca6ac3abd83","keyName":"e2e-sub-iso-23c3c3","subscription":"e2e-shared-sub-20569d","tenant":"e2e-shared-b-a29da6","userId":"1ff79d2d-fd3d-43c7-8bc1-9ca6ac3abd83","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T16:50:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a918c9f0-3b6b-4c8c-b958-91ea024fac79","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T16:50:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a918c9f0-3b6b-4c8c-b958-91ea024fac79","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:50:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a918c9f0-3b6b-4c8c-b958-91ea024fac79","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:50:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a918c9f0-3b6b-4c8c-b958-91ea024fac79","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a29da6/sub-test-model-a29da6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a29da6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:50:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a918c9f0-3b6b-4c8c-b958-91ea024fac79","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T16:50:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a918c9f0-3b6b-4c8c-b958-91ea024fac79","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-24T16:50:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a918c9f0-3b6b-4c8c-b958-91ea024fac79","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T16:50:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a918c9f0-3b6b-4c8c-b958-91ea024fac79","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-20569d"} {"level":"info","ts":"2026-07-24T16:50:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a918c9f0-3b6b-4c8c-b958-91ea024fac79","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T16:50:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a918c9f0-3b6b-4c8c-b958-91ea024fac79","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T16:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c149b09b5b073bc00127c50664a04d6254286b8a8aa6d04b02836fb739c7fca2"} {"level":"info","ts":"2026-07-24T16:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e0bbcb710479288c0124cf6409bf5b281edd8e098cc3c9fed27d6c7667b84ab4"} {"level":"info","ts":"2026-07-24T16:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/25e43dd8cd9e8df003eab83d5aa39480d5ed52e17e5a5f20137f1d4a19dd34de"} {"level":"info","ts":"2026-07-24T16:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0ce769eb6868c94fd0f621fdf44d11412f2c9f961b9c669f7ad7f22fc6c91269"} {"level":"info","ts":"2026-07-24T16:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ab38af1ebba7afb1bbe00772f652cc39e698dcc174beb38b14eddb5a04d636b7"} {"level":"info","ts":"2026-07-24T16:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a0ddc2f51316b31026769cf6672e4d775d7617378edeed0df7ea35c7b1563dbe"} {"level":"info","ts":"2026-07-24T16:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cb6dcdb6e9ea3355e02e59fd215e0620ddc0b79db1abeb9e70f4584d7488896c"} {"level":"info","ts":"2026-07-24T16:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9ec4a1a20f711cb28992864c3e80ab8a3d4c337050c268a74ed98747f5385593"} {"level":"info","ts":"2026-07-24T16:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/82ad05da69d8be2975ed495d4a0cc6952a7e11a5b69225ec1cdab9df53c7ac65"} {"level":"info","ts":"2026-07-24T16:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3"} {"level":"info","ts":"2026-07-24T16:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fd0fa93690c196e5c3835bb2e06063b0061574b3f5030a16c84fe0171579717b"} {"level":"info","ts":"2026-07-24T16:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b5aeffe8621f21d3f3ce127acb9fcd24badc95a166e893b1e6d41ed10ce12e2b"} {"level":"info","ts":"2026-07-24T16:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b5dd61f9f658ed51c3db0e379e6b514132961b5e5b082de1c1080d6e842b96c3"} {"level":"info","ts":"2026-07-24T16:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/baf253fd5cd411b1796be17e409b4d420349d23cf75ba83292fc9972ae7ffd3a"} {"level":"info","ts":"2026-07-24T16:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7e738ec1aeb0b33a0bb1b1f395a9862cd7cd86dd2caf45fbaa59e253ccfd7bf1"} {"level":"info","ts":"2026-07-24T16:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0859bd43ff0f301a33f8370a4dcf63821f0f9dd8b97c20e1723b59edc332fe5d"} {"level":"info","ts":"2026-07-24T16:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593"} {"level":"info","ts":"2026-07-24T16:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4db0c156a24e5ba3308046cf340c73e8fde3b46baf812a6a4ca6072d4683b2a1"} {"level":"info","ts":"2026-07-24T16:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/589d2ecdc82b8822b892a146b449d346cc815e244b62add52b7a5a27f8f8ce60"} {"level":"info","ts":"2026-07-24T16:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455"} {"level":"info","ts":"2026-07-24T16:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/35525b1110e2bcbf2641063df043e43ebbc04ab0c82fa801354b8c5fae30debe"} {"level":"info","ts":"2026-07-24T16:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/be6f9e35a81ecca33c1660f56cf36776e93f0d2e5fd0ce2132e268b20c148dc4"} {"level":"info","ts":"2026-07-24T16:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f5f7e43b9930f08a63a154efdc71eea032e11b7c401d5d1becc38657482bad87"} {"level":"info","ts":"2026-07-24T16:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/81e9995ddd9f9c35264bed75e0221689f4a1913ca22359ec147216fb4c2cfb28"} {"level":"debug","ts":"2026-07-24T16:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74f6a2c6cf4c49698e82fd072f8b62c26c96b22ab50c5539d0e16ef504d91b3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:51:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:51:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74f6a2c6cf4c49698e82fd072f8b62c26c96b22ab50c5539d0e16ef504d91b3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74f6a2c6cf4c49698e82fd072f8b62c26c96b22ab50c5539d0e16ef504d91b3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:51:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:51:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74f6a2c6cf4c49698e82fd072f8b62c26c96b22ab50c5539d0e16ef504d91b3b"} {"level":"info","ts":"2026-07-24T16:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74f6a2c6cf4c49698e82fd072f8b62c26c96b22ab50c5539d0e16ef504d91b3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74f6a2c6cf4c49698e82fd072f8b62c26c96b22ab50c5539d0e16ef504d91b3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:51:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:51:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T16:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"74f6a2c6cf4c49698e82fd072f8b62c26c96b22ab50c5539d0e16ef504d91b3b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"74f6a2c6cf4c49698e82fd072f8b62c26c96b22ab50c5539d0e16ef504d91b3b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T16:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74f6a2c6cf4c49698e82fd072f8b62c26c96b22ab50c5539d0e16ef504d91b3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74f6a2c6cf4c49698e82fd072f8b62c26c96b22ab50c5539d0e16ef504d91b3b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74f6a2c6cf4c49698e82fd072f8b62c26c96b22ab50c5539d0e16ef504d91b3b"} {"level":"info","ts":"2026-07-24T16:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74f6a2c6cf4c49698e82fd072f8b62c26c96b22ab50c5539d0e16ef504d91b3b"} {"level":"debug","ts":"2026-07-24T16:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74f6a2c6cf4c49698e82fd072f8b62c26c96b22ab50c5539d0e16ef504d91b3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:51:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:51:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74f6a2c6cf4c49698e82fd072f8b62c26c96b22ab50c5539d0e16ef504d91b3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74f6a2c6cf4c49698e82fd072f8b62c26c96b22ab50c5539d0e16ef504d91b3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74f6a2c6cf4c49698e82fd072f8b62c26c96b22ab50c5539d0e16ef504d91b3b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74f6a2c6cf4c49698e82fd072f8b62c26c96b22ab50c5539d0e16ef504d91b3b"} {"level":"debug","ts":"2026-07-24T16:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dae8d25f25c96a8a092b7debb6f4dddb561e03935f89ba76636596e154d18e51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:51:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:51:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dae8d25f25c96a8a092b7debb6f4dddb561e03935f89ba76636596e154d18e51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dae8d25f25c96a8a092b7debb6f4dddb561e03935f89ba76636596e154d18e51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dae8d25f25c96a8a092b7debb6f4dddb561e03935f89ba76636596e154d18e51","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dae8d25f25c96a8a092b7debb6f4dddb561e03935f89ba76636596e154d18e51"} {"level":"debug","ts":"2026-07-24T16:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dae8d25f25c96a8a092b7debb6f4dddb561e03935f89ba76636596e154d18e51","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dae8d25f25c96a8a092b7debb6f4dddb561e03935f89ba76636596e154d18e51"} {"level":"debug","ts":"2026-07-24T16:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dae8d25f25c96a8a092b7debb6f4dddb561e03935f89ba76636596e154d18e51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:51:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:51:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dae8d25f25c96a8a092b7debb6f4dddb561e03935f89ba76636596e154d18e51"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dae8d25f25c96a8a092b7debb6f4dddb561e03935f89ba76636596e154d18e51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dae8d25f25c96a8a092b7debb6f4dddb561e03935f89ba76636596e154d18e51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:51:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:51:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dae8d25f25c96a8a092b7debb6f4dddb561e03935f89ba76636596e154d18e51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dae8d25f25c96a8a092b7debb6f4dddb561e03935f89ba76636596e154d18e51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dae8d25f25c96a8a092b7debb6f4dddb561e03935f89ba76636596e154d18e51","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dae8d25f25c96a8a092b7debb6f4dddb561e03935f89ba76636596e154d18e51"} {"level":"debug","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dae8d25f25c96a8a092b7debb6f4dddb561e03935f89ba76636596e154d18e51","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dae8d25f25c96a8a092b7debb6f4dddb561e03935f89ba76636596e154d18e51"} {"level":"debug","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dae8d25f25c96a8a092b7debb6f4dddb561e03935f89ba76636596e154d18e51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dae8d25f25c96a8a092b7debb6f4dddb561e03935f89ba76636596e154d18e51"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dae8d25f25c96a8a092b7debb6f4dddb561e03935f89ba76636596e154d18e51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dae8d25f25c96a8a092b7debb6f4dddb561e03935f89ba76636596e154d18e51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:51:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dae8d25f25c96a8a092b7debb6f4dddb561e03935f89ba76636596e154d18e51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59ed048670e7865fa8680ff440b8b9696e1dcdebc78f14a652b5ebb6a17cad36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:51:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dae8d25f25c96a8a092b7debb6f4dddb561e03935f89ba76636596e154d18e51"} {"level":"info","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59ed048670e7865fa8680ff440b8b9696e1dcdebc78f14a652b5ebb6a17cad36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dae8d25f25c96a8a092b7debb6f4dddb561e03935f89ba76636596e154d18e51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dae8d25f25c96a8a092b7debb6f4dddb561e03935f89ba76636596e154d18e51"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dae8d25f25c96a8a092b7debb6f4dddb561e03935f89ba76636596e154d18e51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59ed048670e7865fa8680ff440b8b9696e1dcdebc78f14a652b5ebb6a17cad36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:51:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59ed048670e7865fa8680ff440b8b9696e1dcdebc78f14a652b5ebb6a17cad36"} {"level":"info","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59ed048670e7865fa8680ff440b8b9696e1dcdebc78f14a652b5ebb6a17cad36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dae8d25f25c96a8a092b7debb6f4dddb561e03935f89ba76636596e154d18e51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:51:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dae8d25f25c96a8a092b7debb6f4dddb561e03935f89ba76636596e154d18e51"} {"level":"info","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dae8d25f25c96a8a092b7debb6f4dddb561e03935f89ba76636596e154d18e51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59ed048670e7865fa8680ff440b8b9696e1dcdebc78f14a652b5ebb6a17cad36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dae8d25f25c96a8a092b7debb6f4dddb561e03935f89ba76636596e154d18e51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dae8d25f25c96a8a092b7debb6f4dddb561e03935f89ba76636596e154d18e51"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dae8d25f25c96a8a092b7debb6f4dddb561e03935f89ba76636596e154d18e51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dae8d25f25c96a8a092b7debb6f4dddb561e03935f89ba76636596e154d18e51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dae8d25f25c96a8a092b7debb6f4dddb561e03935f89ba76636596e154d18e51"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59ed048670e7865fa8680ff440b8b9696e1dcdebc78f14a652b5ebb6a17cad36"} {"level":"error","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"dae8d25f25c96a8a092b7debb6f4dddb561e03935f89ba76636596e154d18e51","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"dae8d25f25c96a8a092b7debb6f4dddb561e03935f89ba76636596e154d18e51\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59ed048670e7865fa8680ff440b8b9696e1dcdebc78f14a652b5ebb6a17cad36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59ed048670e7865fa8680ff440b8b9696e1dcdebc78f14a652b5ebb6a17cad36"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59ed048670e7865fa8680ff440b8b9696e1dcdebc78f14a652b5ebb6a17cad36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dae8d25f25c96a8a092b7debb6f4dddb561e03935f89ba76636596e154d18e51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:51:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dae8d25f25c96a8a092b7debb6f4dddb561e03935f89ba76636596e154d18e51"} {"level":"info","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dae8d25f25c96a8a092b7debb6f4dddb561e03935f89ba76636596e154d18e51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59ed048670e7865fa8680ff440b8b9696e1dcdebc78f14a652b5ebb6a17cad36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:51:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59ed048670e7865fa8680ff440b8b9696e1dcdebc78f14a652b5ebb6a17cad36"} {"level":"info","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59ed048670e7865fa8680ff440b8b9696e1dcdebc78f14a652b5ebb6a17cad36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dae8d25f25c96a8a092b7debb6f4dddb561e03935f89ba76636596e154d18e51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41907e6c08a6b5cc322be47654b44f7e717a080f824e90e2483f76812021b0ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:51:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41907e6c08a6b5cc322be47654b44f7e717a080f824e90e2483f76812021b0ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59ed048670e7865fa8680ff440b8b9696e1dcdebc78f14a652b5ebb6a17cad36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59ed048670e7865fa8680ff440b8b9696e1dcdebc78f14a652b5ebb6a17cad36"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dae8d25f25c96a8a092b7debb6f4dddb561e03935f89ba76636596e154d18e51"} {"level":"info","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59ed048670e7865fa8680ff440b8b9696e1dcdebc78f14a652b5ebb6a17cad36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41907e6c08a6b5cc322be47654b44f7e717a080f824e90e2483f76812021b0ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:51:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41907e6c08a6b5cc322be47654b44f7e717a080f824e90e2483f76812021b0ee"} {"level":"info","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41907e6c08a6b5cc322be47654b44f7e717a080f824e90e2483f76812021b0ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dae8d25f25c96a8a092b7debb6f4dddb561e03935f89ba76636596e154d18e51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dae8d25f25c96a8a092b7debb6f4dddb561e03935f89ba76636596e154d18e51"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dae8d25f25c96a8a092b7debb6f4dddb561e03935f89ba76636596e154d18e51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59ed048670e7865fa8680ff440b8b9696e1dcdebc78f14a652b5ebb6a17cad36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:51:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59ed048670e7865fa8680ff440b8b9696e1dcdebc78f14a652b5ebb6a17cad36"} {"level":"info","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59ed048670e7865fa8680ff440b8b9696e1dcdebc78f14a652b5ebb6a17cad36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41907e6c08a6b5cc322be47654b44f7e717a080f824e90e2483f76812021b0ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dae8d25f25c96a8a092b7debb6f4dddb561e03935f89ba76636596e154d18e51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59ed048670e7865fa8680ff440b8b9696e1dcdebc78f14a652b5ebb6a17cad36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59ed048670e7865fa8680ff440b8b9696e1dcdebc78f14a652b5ebb6a17cad36"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59ed048670e7865fa8680ff440b8b9696e1dcdebc78f14a652b5ebb6a17cad36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59ed048670e7865fa8680ff440b8b9696e1dcdebc78f14a652b5ebb6a17cad36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59ed048670e7865fa8680ff440b8b9696e1dcdebc78f14a652b5ebb6a17cad36"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41907e6c08a6b5cc322be47654b44f7e717a080f824e90e2483f76812021b0ee"} {"level":"error","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"59ed048670e7865fa8680ff440b8b9696e1dcdebc78f14a652b5ebb6a17cad36","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"59ed048670e7865fa8680ff440b8b9696e1dcdebc78f14a652b5ebb6a17cad36\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59ed048670e7865fa8680ff440b8b9696e1dcdebc78f14a652b5ebb6a17cad36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41907e6c08a6b5cc322be47654b44f7e717a080f824e90e2483f76812021b0ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41907e6c08a6b5cc322be47654b44f7e717a080f824e90e2483f76812021b0ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41907e6c08a6b5cc322be47654b44f7e717a080f824e90e2483f76812021b0ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59ed048670e7865fa8680ff440b8b9696e1dcdebc78f14a652b5ebb6a17cad36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41907e6c08a6b5cc322be47654b44f7e717a080f824e90e2483f76812021b0ee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dae8d25f25c96a8a092b7debb6f4dddb561e03935f89ba76636596e154d18e51"} {"level":"info","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59ed048670e7865fa8680ff440b8b9696e1dcdebc78f14a652b5ebb6a17cad36"} {"level":"info","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41907e6c08a6b5cc322be47654b44f7e717a080f824e90e2483f76812021b0ee"} {"level":"debug","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e3d6d6fe8085d0e36b8c7e1ce1dbc025ca573a8bc67c878679bdc9a96eb7280","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:51:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e3d6d6fe8085d0e36b8c7e1ce1dbc025ca573a8bc67c878679bdc9a96eb7280","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e3d6d6fe8085d0e36b8c7e1ce1dbc025ca573a8bc67c878679bdc9a96eb7280","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e3d6d6fe8085d0e36b8c7e1ce1dbc025ca573a8bc67c878679bdc9a96eb7280","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e3d6d6fe8085d0e36b8c7e1ce1dbc025ca573a8bc67c878679bdc9a96eb7280"} {"level":"debug","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e3d6d6fe8085d0e36b8c7e1ce1dbc025ca573a8bc67c878679bdc9a96eb7280","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e3d6d6fe8085d0e36b8c7e1ce1dbc025ca573a8bc67c878679bdc9a96eb7280"} {"level":"debug","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e3d6d6fe8085d0e36b8c7e1ce1dbc025ca573a8bc67c878679bdc9a96eb7280","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e3d6d6fe8085d0e36b8c7e1ce1dbc025ca573a8bc67c878679bdc9a96eb7280"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e3d6d6fe8085d0e36b8c7e1ce1dbc025ca573a8bc67c878679bdc9a96eb7280","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e3d6d6fe8085d0e36b8c7e1ce1dbc025ca573a8bc67c878679bdc9a96eb7280","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5f7e43b9930f08a63a154efdc71eea032e11b7c401d5d1becc38657482bad87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:51:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5f7e43b9930f08a63a154efdc71eea032e11b7c401d5d1becc38657482bad87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5f7e43b9930f08a63a154efdc71eea032e11b7c401d5d1becc38657482bad87","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e3d6d6fe8085d0e36b8c7e1ce1dbc025ca573a8bc67c878679bdc9a96eb7280"} {"level":"debug","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5f7e43b9930f08a63a154efdc71eea032e11b7c401d5d1becc38657482bad87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:51:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5f7e43b9930f08a63a154efdc71eea032e11b7c401d5d1becc38657482bad87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5f7e43b9930f08a63a154efdc71eea032e11b7c401d5d1becc38657482bad87","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5f7e43b9930f08a63a154efdc71eea032e11b7c401d5d1becc38657482bad87"} {"level":"debug","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5f7e43b9930f08a63a154efdc71eea032e11b7c401d5d1becc38657482bad87","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5f7e43b9930f08a63a154efdc71eea032e11b7c401d5d1becc38657482bad87"} {"level":"debug","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"354f3ed6debc19b6ba1f4ab56557bf714dd4f669c31660e396a50da35dd423e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:51:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"354f3ed6debc19b6ba1f4ab56557bf714dd4f669c31660e396a50da35dd423e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"354f3ed6debc19b6ba1f4ab56557bf714dd4f669c31660e396a50da35dd423e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"354f3ed6debc19b6ba1f4ab56557bf714dd4f669c31660e396a50da35dd423e5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/354f3ed6debc19b6ba1f4ab56557bf714dd4f669c31660e396a50da35dd423e5"} {"level":"debug","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5f7e43b9930f08a63a154efdc71eea032e11b7c401d5d1becc38657482bad87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5f7e43b9930f08a63a154efdc71eea032e11b7c401d5d1becc38657482bad87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5f7e43b9930f08a63a154efdc71eea032e11b7c401d5d1becc38657482bad87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"354f3ed6debc19b6ba1f4ab56557bf714dd4f669c31660e396a50da35dd423e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5f7e43b9930f08a63a154efdc71eea032e11b7c401d5d1becc38657482bad87","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/354f3ed6debc19b6ba1f4ab56557bf714dd4f669c31660e396a50da35dd423e5"} {"level":"debug","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"354f3ed6debc19b6ba1f4ab56557bf714dd4f669c31660e396a50da35dd423e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["354f3ed6debc19b6ba1f4ab56557bf714dd4f669c31660e396a50da35dd423e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"354f3ed6debc19b6ba1f4ab56557bf714dd4f669c31660e396a50da35dd423e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0859bd43ff0f301a33f8370a4dcf63821f0f9dd8b97c20e1723b59edc332fe5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:51:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0859bd43ff0f301a33f8370a4dcf63821f0f9dd8b97c20e1723b59edc332fe5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"354f3ed6debc19b6ba1f4ab56557bf714dd4f669c31660e396a50da35dd423e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac4a11a47c4aafe958cc2004346f76e3de7218e09f2bafe535bc57accb051e52","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:51:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5f7e43b9930f08a63a154efdc71eea032e11b7c401d5d1becc38657482bad87"} {"level":"info","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac4a11a47c4aafe958cc2004346f76e3de7218e09f2bafe535bc57accb051e52","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0859bd43ff0f301a33f8370a4dcf63821f0f9dd8b97c20e1723b59edc332fe5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:51:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0859bd43ff0f301a33f8370a4dcf63821f0f9dd8b97c20e1723b59edc332fe5d"} {"level":"info","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0859bd43ff0f301a33f8370a4dcf63821f0f9dd8b97c20e1723b59edc332fe5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac4a11a47c4aafe958cc2004346f76e3de7218e09f2bafe535bc57accb051e52","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0859bd43ff0f301a33f8370a4dcf63821f0f9dd8b97c20e1723b59edc332fe5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0859bd43ff0f301a33f8370a4dcf63821f0f9dd8b97c20e1723b59edc332fe5d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0859bd43ff0f301a33f8370a4dcf63821f0f9dd8b97c20e1723b59edc332fe5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac4a11a47c4aafe958cc2004346f76e3de7218e09f2bafe535bc57accb051e52","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0859bd43ff0f301a33f8370a4dcf63821f0f9dd8b97c20e1723b59edc332fe5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0859bd43ff0f301a33f8370a4dcf63821f0f9dd8b97c20e1723b59edc332fe5d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0859bd43ff0f301a33f8370a4dcf63821f0f9dd8b97c20e1723b59edc332fe5d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0859bd43ff0f301a33f8370a4dcf63821f0f9dd8b97c20e1723b59edc332fe5d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0859bd43ff0f301a33f8370a4dcf63821f0f9dd8b97c20e1723b59edc332fe5d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/354f3ed6debc19b6ba1f4ab56557bf714dd4f669c31660e396a50da35dd423e5"} {"level":"debug","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0859bd43ff0f301a33f8370a4dcf63821f0f9dd8b97c20e1723b59edc332fe5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac4a11a47c4aafe958cc2004346f76e3de7218e09f2bafe535bc57accb051e52","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:51:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac4a11a47c4aafe958cc2004346f76e3de7218e09f2bafe535bc57accb051e52"} {"level":"info","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac4a11a47c4aafe958cc2004346f76e3de7218e09f2bafe535bc57accb051e52","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac4a11a47c4aafe958cc2004346f76e3de7218e09f2bafe535bc57accb051e52","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac4a11a47c4aafe958cc2004346f76e3de7218e09f2bafe535bc57accb051e52"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac4a11a47c4aafe958cc2004346f76e3de7218e09f2bafe535bc57accb051e52","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac4a11a47c4aafe958cc2004346f76e3de7218e09f2bafe535bc57accb051e52","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0859bd43ff0f301a33f8370a4dcf63821f0f9dd8b97c20e1723b59edc332fe5d"} {"level":"debug","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:51:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac4a11a47c4aafe958cc2004346f76e3de7218e09f2bafe535bc57accb051e52"} {"level":"debug","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac4a11a47c4aafe958cc2004346f76e3de7218e09f2bafe535bc57accb051e52","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:51:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593"} {"level":"info","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:51:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593"} {"level":"info","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593"} {"level":"debug","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab38af1ebba7afb1bbe00772f652cc39e698dcc174beb38b14eddb5a04d636b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:51:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:51:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab38af1ebba7afb1bbe00772f652cc39e698dcc174beb38b14eddb5a04d636b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab38af1ebba7afb1bbe00772f652cc39e698dcc174beb38b14eddb5a04d636b7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593"} {"level":"debug","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab38af1ebba7afb1bbe00772f652cc39e698dcc174beb38b14eddb5a04d636b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:51:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:51:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab38af1ebba7afb1bbe00772f652cc39e698dcc174beb38b14eddb5a04d636b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab38af1ebba7afb1bbe00772f652cc39e698dcc174beb38b14eddb5a04d636b7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab38af1ebba7afb1bbe00772f652cc39e698dcc174beb38b14eddb5a04d636b7"} {"level":"debug","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab38af1ebba7afb1bbe00772f652cc39e698dcc174beb38b14eddb5a04d636b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:51:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:51:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab38af1ebba7afb1bbe00772f652cc39e698dcc174beb38b14eddb5a04d636b7"} {"level":"info","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:51:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:51:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593"} {"level":"debug","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"573e15b5295902f577d0142f8933da1c47e15a4d28cbb5226d048da5a3b0a513","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:51:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:51:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"573e15b5295902f577d0142f8933da1c47e15a4d28cbb5226d048da5a3b0a513","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:51:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:51:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593"} {"level":"info","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"573e15b5295902f577d0142f8933da1c47e15a4d28cbb5226d048da5a3b0a513","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:51:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:51:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/573e15b5295902f577d0142f8933da1c47e15a4d28cbb5226d048da5a3b0a513"} {"level":"info","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"573e15b5295902f577d0142f8933da1c47e15a4d28cbb5226d048da5a3b0a513","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:51:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:51:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9535f1df272fc59d4ca7028b82ef576d12cb87d8016b38dfcd749b2ab8ce6d56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:51:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:51:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3"} {"level":"info","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9535f1df272fc59d4ca7028b82ef576d12cb87d8016b38dfcd749b2ab8ce6d56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:51:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:51:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9535f1df272fc59d4ca7028b82ef576d12cb87d8016b38dfcd749b2ab8ce6d56"} {"level":"info","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"573e15b5295902f577d0142f8933da1c47e15a4d28cbb5226d048da5a3b0a513","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab38af1ebba7afb1bbe00772f652cc39e698dcc174beb38b14eddb5a04d636b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:51:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:51:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab38af1ebba7afb1bbe00772f652cc39e698dcc174beb38b14eddb5a04d636b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab38af1ebba7afb1bbe00772f652cc39e698dcc174beb38b14eddb5a04d636b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9535f1df272fc59d4ca7028b82ef576d12cb87d8016b38dfcd749b2ab8ce6d56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:51:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:51:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9535f1df272fc59d4ca7028b82ef576d12cb87d8016b38dfcd749b2ab8ce6d56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/573e15b5295902f577d0142f8933da1c47e15a4d28cbb5226d048da5a3b0a513"} {"level":"info","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9535f1df272fc59d4ca7028b82ef576d12cb87d8016b38dfcd749b2ab8ce6d56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab38af1ebba7afb1bbe00772f652cc39e698dcc174beb38b14eddb5a04d636b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c707b56b013cf433d5f99fcd6c0693dd9e5fed41396c5ce7511dc721f4df0895","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:51:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:51:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c707b56b013cf433d5f99fcd6c0693dd9e5fed41396c5ce7511dc721f4df0895","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"573e15b5295902f577d0142f8933da1c47e15a4d28cbb5226d048da5a3b0a513","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:51:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:51:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["573e15b5295902f577d0142f8933da1c47e15a4d28cbb5226d048da5a3b0a513"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593"} {"level":"info","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"573e15b5295902f577d0142f8933da1c47e15a4d28cbb5226d048da5a3b0a513","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9535f1df272fc59d4ca7028b82ef576d12cb87d8016b38dfcd749b2ab8ce6d56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:51:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:51:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9535f1df272fc59d4ca7028b82ef576d12cb87d8016b38dfcd749b2ab8ce6d56"} {"level":"info","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9535f1df272fc59d4ca7028b82ef576d12cb87d8016b38dfcd749b2ab8ce6d56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4515c5a3500677874d1a7b75c380a71033666da3cb739d9520a9e1be6e37187b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:51:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:51:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4515c5a3500677874d1a7b75c380a71033666da3cb739d9520a9e1be6e37187b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c707b56b013cf433d5f99fcd6c0693dd9e5fed41396c5ce7511dc721f4df0895","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4785d683adbb6a5894cec9fdb6aa9d0a68a75dd673a67c3808cfb5c35981b344","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:51:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:51:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3"} {"level":"info","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab38af1ebba7afb1bbe00772f652cc39e698dcc174beb38b14eddb5a04d636b7"} {"level":"info","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4785d683adbb6a5894cec9fdb6aa9d0a68a75dd673a67c3808cfb5c35981b344","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"573e15b5295902f577d0142f8933da1c47e15a4d28cbb5226d048da5a3b0a513","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9535f1df272fc59d4ca7028b82ef576d12cb87d8016b38dfcd749b2ab8ce6d56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:51:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:51:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9535f1df272fc59d4ca7028b82ef576d12cb87d8016b38dfcd749b2ab8ce6d56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c707b56b013cf433d5f99fcd6c0693dd9e5fed41396c5ce7511dc721f4df0895"} {"level":"info","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4515c5a3500677874d1a7b75c380a71033666da3cb739d9520a9e1be6e37187b"} {"level":"info","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4785d683adbb6a5894cec9fdb6aa9d0a68a75dd673a67c3808cfb5c35981b344"} {"level":"info","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9535f1df272fc59d4ca7028b82ef576d12cb87d8016b38dfcd749b2ab8ce6d56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4515c5a3500677874d1a7b75c380a71033666da3cb739d9520a9e1be6e37187b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:51:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:51:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4515c5a3500677874d1a7b75c380a71033666da3cb739d9520a9e1be6e37187b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/573e15b5295902f577d0142f8933da1c47e15a4d28cbb5226d048da5a3b0a513"} {"level":"info","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9535f1df272fc59d4ca7028b82ef576d12cb87d8016b38dfcd749b2ab8ce6d56"} {"level":"info","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4515c5a3500677874d1a7b75c380a71033666da3cb739d9520a9e1be6e37187b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c707b56b013cf433d5f99fcd6c0693dd9e5fed41396c5ce7511dc721f4df0895","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:51:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:51:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c707b56b013cf433d5f99fcd6c0693dd9e5fed41396c5ce7511dc721f4df0895"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455"} {"level":"info","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2cfbfafe103518959b7d7e8c3a363c82da2df40b88d3e6a096ee5cde2b61bc9d"} {"level":"info","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c149b09b5b073bc00127c50664a04d6254286b8a8aa6d04b02836fb739c7fca2"} {"level":"info","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c707b56b013cf433d5f99fcd6c0693dd9e5fed41396c5ce7511dc721f4df0895","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4785d683adbb6a5894cec9fdb6aa9d0a68a75dd673a67c3808cfb5c35981b344","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:51:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:51:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4785d683adbb6a5894cec9fdb6aa9d0a68a75dd673a67c3808cfb5c35981b344"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1df62ca7954ce3199a8fb1cf952d160ed1cdaf653bd3c5053b9be632c2ebbeb2"} {"level":"info","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4c31d1597639eb1acd51e3ce2aedca35f7e39c8508d4a306c3e66bab139bc8d"} {"level":"info","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4785d683adbb6a5894cec9fdb6aa9d0a68a75dd673a67c3808cfb5c35981b344","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:51:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:51:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4515c5a3500677874d1a7b75c380a71033666da3cb739d9520a9e1be6e37187b"} {"level":"info","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ec4a1a20f711cb28992864c3e80ab8a3d4c337050c268a74ed98747f5385593"} {"level":"info","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea5fe92f151339ad9fa27a1cbd8fdbd7a76cee4756eafd8c59f7f3aac13c4959"} {"level":"info","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2cfbfafe103518959b7d7e8c3a363c82da2df40b88d3e6a096ee5cde2b61bc9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:51:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:51:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2cfbfafe103518959b7d7e8c3a363c82da2df40b88d3e6a096ee5cde2b61bc9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c707b56b013cf433d5f99fcd6c0693dd9e5fed41396c5ce7511dc721f4df0895"} {"level":"info","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4785d683adbb6a5894cec9fdb6aa9d0a68a75dd673a67c3808cfb5c35981b344"} {"level":"info","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2cfbfafe103518959b7d7e8c3a363c82da2df40b88d3e6a096ee5cde2b61bc9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c149b09b5b073bc00127c50664a04d6254286b8a8aa6d04b02836fb739c7fca2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:51:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:51:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c149b09b5b073bc00127c50664a04d6254286b8a8aa6d04b02836fb739c7fca2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455"} {"level":"info","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c149b09b5b073bc00127c50664a04d6254286b8a8aa6d04b02836fb739c7fca2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1df62ca7954ce3199a8fb1cf952d160ed1cdaf653bd3c5053b9be632c2ebbeb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:51:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:51:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1df62ca7954ce3199a8fb1cf952d160ed1cdaf653bd3c5053b9be632c2ebbeb2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2cfbfafe103518959b7d7e8c3a363c82da2df40b88d3e6a096ee5cde2b61bc9d"} {"level":"info","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c149b09b5b073bc00127c50664a04d6254286b8a8aa6d04b02836fb739c7fca2"} {"level":"info","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1df62ca7954ce3199a8fb1cf952d160ed1cdaf653bd3c5053b9be632c2ebbeb2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9535f1df272fc59d4ca7028b82ef576d12cb87d8016b38dfcd749b2ab8ce6d56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4c31d1597639eb1acd51e3ce2aedca35f7e39c8508d4a306c3e66bab139bc8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:51:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:51:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4c31d1597639eb1acd51e3ce2aedca35f7e39c8508d4a306c3e66bab139bc8d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1df62ca7954ce3199a8fb1cf952d160ed1cdaf653bd3c5053b9be632c2ebbeb2"} {"level":"info","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4c31d1597639eb1acd51e3ce2aedca35f7e39c8508d4a306c3e66bab139bc8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4515c5a3500677874d1a7b75c380a71033666da3cb739d9520a9e1be6e37187b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ec4a1a20f711cb28992864c3e80ab8a3d4c337050c268a74ed98747f5385593","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:51:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:51:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ec4a1a20f711cb28992864c3e80ab8a3d4c337050c268a74ed98747f5385593"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4c31d1597639eb1acd51e3ce2aedca35f7e39c8508d4a306c3e66bab139bc8d"} {"level":"info","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ec4a1a20f711cb28992864c3e80ab8a3d4c337050c268a74ed98747f5385593","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea5fe92f151339ad9fa27a1cbd8fdbd7a76cee4756eafd8c59f7f3aac13c4959","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:51:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:51:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea5fe92f151339ad9fa27a1cbd8fdbd7a76cee4756eafd8c59f7f3aac13c4959"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ec4a1a20f711cb28992864c3e80ab8a3d4c337050c268a74ed98747f5385593"} {"level":"info","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea5fe92f151339ad9fa27a1cbd8fdbd7a76cee4756eafd8c59f7f3aac13c4959","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c707b56b013cf433d5f99fcd6c0693dd9e5fed41396c5ce7511dc721f4df0895","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4785d683adbb6a5894cec9fdb6aa9d0a68a75dd673a67c3808cfb5c35981b344","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2cfbfafe103518959b7d7e8c3a363c82da2df40b88d3e6a096ee5cde2b61bc9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c149b09b5b073bc00127c50664a04d6254286b8a8aa6d04b02836fb739c7fca2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1df62ca7954ce3199a8fb1cf952d160ed1cdaf653bd3c5053b9be632c2ebbeb2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4c31d1597639eb1acd51e3ce2aedca35f7e39c8508d4a306c3e66bab139bc8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ec4a1a20f711cb28992864c3e80ab8a3d4c337050c268a74ed98747f5385593","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea5fe92f151339ad9fa27a1cbd8fdbd7a76cee4756eafd8c59f7f3aac13c4959","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea5fe92f151339ad9fa27a1cbd8fdbd7a76cee4756eafd8c59f7f3aac13c4959"} {"level":"info","ts":"2026-07-24T16:51:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f879fb2f-dd77-4743-9e73-fdc1ecf0b78d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50148","PortSpecifier":{"PortValue":50148}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f879fb2f-dd77-4743-9e73-fdc1ecf0b78d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a65dee.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T16:51:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f879fb2f-dd77-4743-9e73-fdc1ecf0b78d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50148","PortSpecifier":{"PortValue":50148}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784911908,"nanos":845416384},"http":{"id":"f879fb2f-dd77-4743-9e73-fdc1ecf0b78d","method":"POST","headers":{":authority":"e2e-shared-a-a65dee.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T16:51:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f879fb2f-dd77-4743-9e73-fdc1ecf0b78d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T16:51:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f879fb2f-dd77-4743-9e73-fdc1ecf0b78d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c6920799-9c3c-48b3-a3e6-1c1556efc9c4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=515021ea-127d-4968-9b2f-4957a9e43ba5"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cf20df43e4ca"]}} {"level":"debug","ts":"2026-07-24T16:51:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f879fb2f-dd77-4743-9e73-fdc1ecf0b78d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cf20df43e4ca"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=515021ea-127d-4968-9b2f-4957a9e43ba5"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c6920799-9c3c-48b3-a3e6-1c1556efc9c4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c149b09b5b073bc00127c50664a04d6254286b8a8aa6d04b02836fb739c7fca2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.74:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a65dee.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T16:51:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f879fb2f-dd77-4743-9e73-fdc1ecf0b78d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:51:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f879fb2f-dd77-4743-9e73-fdc1ecf0b78d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:51:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f879fb2f-dd77-4743-9e73-fdc1ecf0b78d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a65dee/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:51:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f879fb2f-dd77-4743-9e73-fdc1ecf0b78d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T16:51:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f879fb2f-dd77-4743-9e73-fdc1ecf0b78d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T16:51:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f879fb2f-dd77-4743-9e73-fdc1ecf0b78d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-24T16:51:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f879fb2f-dd77-4743-9e73-fdc1ecf0b78d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T16:51:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f879fb2f-dd77-4743-9e73-fdc1ecf0b78d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T16:51:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"285e3d0b-936c-46bd-998e-d0962723f441","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:58688","PortSpecifier":{"PortValue":58688}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"285e3d0b-936c-46bd-998e-d0962723f441","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a29da6.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T16:51:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"285e3d0b-936c-46bd-998e-d0962723f441","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:58688","PortSpecifier":{"PortValue":58688}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784911908,"nanos":886776395},"http":{"id":"285e3d0b-936c-46bd-998e-d0962723f441","method":"POST","headers":{":authority":"e2e-shared-b-a29da6.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T16:51:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"285e3d0b-936c-46bd-998e-d0962723f441","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T16:51:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"285e3d0b-936c-46bd-998e-d0962723f441","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c6920799-9c3c-48b3-a3e6-1c1556efc9c4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=515021ea-127d-4968-9b2f-4957a9e43ba5"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cf20df43e4ca"]}} {"level":"debug","ts":"2026-07-24T16:51:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"285e3d0b-936c-46bd-998e-d0962723f441","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cf20df43e4ca"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=515021ea-127d-4968-9b2f-4957a9e43ba5"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c6920799-9c3c-48b3-a3e6-1c1556efc9c4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0859bd43ff0f301a33f8370a4dcf63821f0f9dd8b97c20e1723b59edc332fe5d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a29da6.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T16:51:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"285e3d0b-936c-46bd-998e-d0962723f441","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:51:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"285e3d0b-936c-46bd-998e-d0962723f441","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:51:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"285e3d0b-936c-46bd-998e-d0962723f441","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a29da6/rate-test-model-a29da6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a29da6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:51:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"285e3d0b-936c-46bd-998e-d0962723f441","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T16:51:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"285e3d0b-936c-46bd-998e-d0962723f441","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T16:51:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"285e3d0b-936c-46bd-998e-d0962723f441","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T16:51:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"285e3d0b-936c-46bd-998e-d0962723f441","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T16:51:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"285e3d0b-936c-46bd-998e-d0962723f441","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T16:51:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"61018e21-1ca0-47e3-bb3d-cb1833220b31","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50162","PortSpecifier":{"PortValue":50162}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"61018e21-1ca0-47e3-bb3d-cb1833220b31","method":"POST","path":"/ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee/v1/completions","host":"e2e-shared-a-a65dee.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T16:51:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"61018e21-1ca0-47e3-bb3d-cb1833220b31","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50162","PortSpecifier":{"PortValue":50162}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784911908,"nanos":927208193},"http":{"id":"61018e21-1ca0-47e3-bb3d-cb1833220b31","method":"POST","headers":{":authority":"e2e-shared-a-a65dee.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T16:51:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"61018e21-1ca0-47e3-bb3d-cb1833220b31","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-s6JWKbKDL4KjA7Fz_r5uT0tG9LNpDYCLU7OLAS0koEYQG46UpWIa6bkZOttc"} {"level":"debug","ts":"2026-07-24T16:51:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"61018e21-1ca0-47e3-bb3d-cb1833220b31","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-s6JWKbKDL4KjA7Fz_r5uT0tG9LNpDYCLU7OLAS0koEYQG46UpWIa6bkZOttc\"}"} {"level":"debug","ts":"2026-07-24T16:51:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"61018e21-1ca0-47e3-bb3d-cb1833220b31","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"38be5404-3cb5-46bb-851d-2cc3939cc219","keyName":"e2e-rate-a-1e0078","subscription":"e2e-rate-iso-a-1e0078","tenant":"e2e-shared-a-a65dee","userId":"38be5404-3cb5-46bb-851d-2cc3939cc219","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T16:51:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"61018e21-1ca0-47e3-bb3d-cb1833220b31","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee\",\"requestedSubscription\":\"e2e-rate-iso-a-1e0078\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T16:51:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"61018e21-1ca0-47e3-bb3d-cb1833220b31","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a65dee","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1e0078","namespace":"ai-tenant-e2e-shared-a-a65dee","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee"}} {"level":"debug","ts":"2026-07-24T16:51:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"61018e21-1ca0-47e3-bb3d-cb1833220b31","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T16:51:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"61018e21-1ca0-47e3-bb3d-cb1833220b31","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:51:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"61018e21-1ca0-47e3-bb3d-cb1833220b31","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:51:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"61018e21-1ca0-47e3-bb3d-cb1833220b31","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:51:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"61018e21-1ca0-47e3-bb3d-cb1833220b31","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a65dee/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:51:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"61018e21-1ca0-47e3-bb3d-cb1833220b31","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T16:51:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"61018e21-1ca0-47e3-bb3d-cb1833220b31","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T16:51:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"61018e21-1ca0-47e3-bb3d-cb1833220b31","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1e0078"} {"level":"debug","ts":"2026-07-24T16:51:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"61018e21-1ca0-47e3-bb3d-cb1833220b31","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"38be5404-3cb5-46bb-851d-2cc3939cc219","keyName":"e2e-rate-a-1e0078","selected_subscription":"e2e-rate-iso-a-1e0078","selected_subscription_key":"ai-tenant-e2e-shared-a-a65dee/e2e-rate-iso-a-1e0078@ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a65dee","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1e0078","namespace":"ai-tenant-e2e-shared-a-a65dee","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T16:51:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"61018e21-1ca0-47e3-bb3d-cb1833220b31","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T16:51:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"61018e21-1ca0-47e3-bb3d-cb1833220b31","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T16:51:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4ace9db3-888d-445f-8e53-0a4078fe5b8e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50176","PortSpecifier":{"PortValue":50176}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4ace9db3-888d-445f-8e53-0a4078fe5b8e","method":"POST","path":"/ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee/v1/completions","host":"e2e-shared-a-a65dee.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T16:51:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4ace9db3-888d-445f-8e53-0a4078fe5b8e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50176","PortSpecifier":{"PortValue":50176}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784911910,"nanos":5310528},"http":{"id":"4ace9db3-888d-445f-8e53-0a4078fe5b8e","method":"POST","headers":{":authority":"e2e-shared-a-a65dee.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T16:51:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4ace9db3-888d-445f-8e53-0a4078fe5b8e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-s6JWKbKDL4KjA7Fz_r5uT0tG9LNpDYCLU7OLAS0koEYQG46UpWIa6bkZOttc"} {"level":"debug","ts":"2026-07-24T16:51:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4ace9db3-888d-445f-8e53-0a4078fe5b8e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-s6JWKbKDL4KjA7Fz_r5uT0tG9LNpDYCLU7OLAS0koEYQG46UpWIa6bkZOttc\"}"} {"level":"debug","ts":"2026-07-24T16:51:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4ace9db3-888d-445f-8e53-0a4078fe5b8e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"38be5404-3cb5-46bb-851d-2cc3939cc219","keyName":"e2e-rate-a-1e0078","subscription":"e2e-rate-iso-a-1e0078","tenant":"e2e-shared-a-a65dee","userId":"38be5404-3cb5-46bb-851d-2cc3939cc219","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T16:51:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4ace9db3-888d-445f-8e53-0a4078fe5b8e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee\",\"requestedSubscription\":\"e2e-rate-iso-a-1e0078\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T16:51:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4ace9db3-888d-445f-8e53-0a4078fe5b8e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a65dee","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1e0078","namespace":"ai-tenant-e2e-shared-a-a65dee","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee"}} {"level":"debug","ts":"2026-07-24T16:51:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4ace9db3-888d-445f-8e53-0a4078fe5b8e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T16:51:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4ace9db3-888d-445f-8e53-0a4078fe5b8e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:51:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4ace9db3-888d-445f-8e53-0a4078fe5b8e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:51:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4ace9db3-888d-445f-8e53-0a4078fe5b8e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:51:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4ace9db3-888d-445f-8e53-0a4078fe5b8e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a65dee/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:51:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4ace9db3-888d-445f-8e53-0a4078fe5b8e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T16:51:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4ace9db3-888d-445f-8e53-0a4078fe5b8e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T16:51:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4ace9db3-888d-445f-8e53-0a4078fe5b8e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1e0078"} {"level":"debug","ts":"2026-07-24T16:51:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4ace9db3-888d-445f-8e53-0a4078fe5b8e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"38be5404-3cb5-46bb-851d-2cc3939cc219","keyName":"e2e-rate-a-1e0078","selected_subscription":"e2e-rate-iso-a-1e0078","selected_subscription_key":"ai-tenant-e2e-shared-a-a65dee/e2e-rate-iso-a-1e0078@ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a65dee","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1e0078","namespace":"ai-tenant-e2e-shared-a-a65dee","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T16:51:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4ace9db3-888d-445f-8e53-0a4078fe5b8e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T16:51:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4ace9db3-888d-445f-8e53-0a4078fe5b8e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T16:51:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"008dbf60-4e7a-42ad-9c3a-6dea47a1c084","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50182","PortSpecifier":{"PortValue":50182}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"008dbf60-4e7a-42ad-9c3a-6dea47a1c084","method":"POST","path":"/ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee/v1/completions","host":"e2e-shared-a-a65dee.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T16:51:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"008dbf60-4e7a-42ad-9c3a-6dea47a1c084","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50182","PortSpecifier":{"PortValue":50182}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784911911,"nanos":59050018},"http":{"id":"008dbf60-4e7a-42ad-9c3a-6dea47a1c084","method":"POST","headers":{":authority":"e2e-shared-a-a65dee.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T16:51:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"008dbf60-4e7a-42ad-9c3a-6dea47a1c084","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-s6JWKbKDL4KjA7Fz_r5uT0tG9LNpDYCLU7OLAS0koEYQG46UpWIa6bkZOttc"} {"level":"debug","ts":"2026-07-24T16:51:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"008dbf60-4e7a-42ad-9c3a-6dea47a1c084","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-s6JWKbKDL4KjA7Fz_r5uT0tG9LNpDYCLU7OLAS0koEYQG46UpWIa6bkZOttc\"}"} {"level":"debug","ts":"2026-07-24T16:51:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"008dbf60-4e7a-42ad-9c3a-6dea47a1c084","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"38be5404-3cb5-46bb-851d-2cc3939cc219","keyName":"e2e-rate-a-1e0078","subscription":"e2e-rate-iso-a-1e0078","tenant":"e2e-shared-a-a65dee","userId":"38be5404-3cb5-46bb-851d-2cc3939cc219","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T16:51:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"008dbf60-4e7a-42ad-9c3a-6dea47a1c084","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee\",\"requestedSubscription\":\"e2e-rate-iso-a-1e0078\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T16:51:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"008dbf60-4e7a-42ad-9c3a-6dea47a1c084","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a65dee","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1e0078","namespace":"ai-tenant-e2e-shared-a-a65dee","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee"}} {"level":"debug","ts":"2026-07-24T16:51:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"008dbf60-4e7a-42ad-9c3a-6dea47a1c084","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T16:51:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"008dbf60-4e7a-42ad-9c3a-6dea47a1c084","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:51:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"008dbf60-4e7a-42ad-9c3a-6dea47a1c084","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:51:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"008dbf60-4e7a-42ad-9c3a-6dea47a1c084","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a65dee/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:51:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"008dbf60-4e7a-42ad-9c3a-6dea47a1c084","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:51:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"008dbf60-4e7a-42ad-9c3a-6dea47a1c084","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T16:51:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"008dbf60-4e7a-42ad-9c3a-6dea47a1c084","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1e0078"} {"level":"debug","ts":"2026-07-24T16:51:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"008dbf60-4e7a-42ad-9c3a-6dea47a1c084","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T16:51:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"008dbf60-4e7a-42ad-9c3a-6dea47a1c084","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"38be5404-3cb5-46bb-851d-2cc3939cc219","keyName":"e2e-rate-a-1e0078","selected_subscription":"e2e-rate-iso-a-1e0078","selected_subscription_key":"ai-tenant-e2e-shared-a-a65dee/e2e-rate-iso-a-1e0078@ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a65dee","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1e0078","namespace":"ai-tenant-e2e-shared-a-a65dee","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T16:51:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"008dbf60-4e7a-42ad-9c3a-6dea47a1c084","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T16:51:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"008dbf60-4e7a-42ad-9c3a-6dea47a1c084","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T16:51:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d0cfbce9-1659-4ffc-97f2-796fb9b53e94","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:41308","PortSpecifier":{"PortValue":41308}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d0cfbce9-1659-4ffc-97f2-796fb9b53e94","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a65dee.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T16:51:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d0cfbce9-1659-4ffc-97f2-796fb9b53e94","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:41308","PortSpecifier":{"PortValue":41308}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784911919,"nanos":703420468},"http":{"id":"d0cfbce9-1659-4ffc-97f2-796fb9b53e94","method":"POST","headers":{":authority":"e2e-shared-a-a65dee.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T16:51:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d0cfbce9-1659-4ffc-97f2-796fb9b53e94","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T16:51:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d0cfbce9-1659-4ffc-97f2-796fb9b53e94","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c6920799-9c3c-48b3-a3e6-1c1556efc9c4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=515021ea-127d-4968-9b2f-4957a9e43ba5"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cf20df43e4ca"]}} {"level":"debug","ts":"2026-07-24T16:51:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d0cfbce9-1659-4ffc-97f2-796fb9b53e94","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cf20df43e4ca"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=515021ea-127d-4968-9b2f-4957a9e43ba5"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c6920799-9c3c-48b3-a3e6-1c1556efc9c4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c149b09b5b073bc00127c50664a04d6254286b8a8aa6d04b02836fb739c7fca2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.74:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a65dee.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T16:51:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d0cfbce9-1659-4ffc-97f2-796fb9b53e94","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:51:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d0cfbce9-1659-4ffc-97f2-796fb9b53e94","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:51:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d0cfbce9-1659-4ffc-97f2-796fb9b53e94","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a65dee/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:51:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d0cfbce9-1659-4ffc-97f2-796fb9b53e94","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T16:51:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d0cfbce9-1659-4ffc-97f2-796fb9b53e94","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T16:51:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d0cfbce9-1659-4ffc-97f2-796fb9b53e94","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T16:51:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d0cfbce9-1659-4ffc-97f2-796fb9b53e94","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T16:51:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d0cfbce9-1659-4ffc-97f2-796fb9b53e94","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T16:51:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4995840e-cfbe-49b5-a3c9-70630563f987","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:44432","PortSpecifier":{"PortValue":44432}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4995840e-cfbe-49b5-a3c9-70630563f987","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a29da6.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T16:51:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4995840e-cfbe-49b5-a3c9-70630563f987","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:44432","PortSpecifier":{"PortValue":44432}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784911919,"nanos":739502127},"http":{"id":"4995840e-cfbe-49b5-a3c9-70630563f987","method":"POST","headers":{":authority":"e2e-shared-b-a29da6.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T16:51:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4995840e-cfbe-49b5-a3c9-70630563f987","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T16:51:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4995840e-cfbe-49b5-a3c9-70630563f987","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c6920799-9c3c-48b3-a3e6-1c1556efc9c4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=515021ea-127d-4968-9b2f-4957a9e43ba5"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cf20df43e4ca"]}} {"level":"debug","ts":"2026-07-24T16:51:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4995840e-cfbe-49b5-a3c9-70630563f987","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cf20df43e4ca"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=515021ea-127d-4968-9b2f-4957a9e43ba5"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c6920799-9c3c-48b3-a3e6-1c1556efc9c4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0859bd43ff0f301a33f8370a4dcf63821f0f9dd8b97c20e1723b59edc332fe5d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a29da6.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T16:51:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4995840e-cfbe-49b5-a3c9-70630563f987","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:51:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4995840e-cfbe-49b5-a3c9-70630563f987","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:51:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4995840e-cfbe-49b5-a3c9-70630563f987","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a29da6/rate-test-model-a29da6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a29da6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:51:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4995840e-cfbe-49b5-a3c9-70630563f987","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T16:51:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4995840e-cfbe-49b5-a3c9-70630563f987","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T16:51:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4995840e-cfbe-49b5-a3c9-70630563f987","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T16:51:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4995840e-cfbe-49b5-a3c9-70630563f987","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T16:51:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4995840e-cfbe-49b5-a3c9-70630563f987","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T16:51:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8257dec7-7ec3-450a-b79b-7ab61b45044c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:41312","PortSpecifier":{"PortValue":41312}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8257dec7-7ec3-450a-b79b-7ab61b45044c","method":"POST","path":"/ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee/v1/completions","host":"e2e-shared-a-a65dee.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T16:51:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8257dec7-7ec3-450a-b79b-7ab61b45044c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:41312","PortSpecifier":{"PortValue":41312}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784911919,"nanos":776705776},"http":{"id":"8257dec7-7ec3-450a-b79b-7ab61b45044c","method":"POST","headers":{":authority":"e2e-shared-a-a65dee.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T16:51:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8257dec7-7ec3-450a-b79b-7ab61b45044c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MPnvLsQbeQE3TdWH_TTNnmvBA510o7TpjSLhhJtBO2j2EPZMV6j2DbpBjdXJ"} {"level":"debug","ts":"2026-07-24T16:51:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8257dec7-7ec3-450a-b79b-7ab61b45044c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-MPnvLsQbeQE3TdWH_TTNnmvBA510o7TpjSLhhJtBO2j2EPZMV6j2DbpBjdXJ\"}"} {"level":"debug","ts":"2026-07-24T16:51:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8257dec7-7ec3-450a-b79b-7ab61b45044c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c8d70d5c-ded2-4f9f-81ba-a7a0cfc53138","keyName":"e2e-rate-a-e21d86","subscription":"e2e-rate-iso-a-e21d86","tenant":"e2e-shared-a-a65dee","userId":"c8d70d5c-ded2-4f9f-81ba-a7a0cfc53138","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T16:51:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8257dec7-7ec3-450a-b79b-7ab61b45044c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee\",\"requestedSubscription\":\"e2e-rate-iso-a-e21d86\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T16:51:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8257dec7-7ec3-450a-b79b-7ab61b45044c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a65dee","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e21d86","namespace":"ai-tenant-e2e-shared-a-a65dee","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee"}} {"level":"debug","ts":"2026-07-24T16:51:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8257dec7-7ec3-450a-b79b-7ab61b45044c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T16:51:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8257dec7-7ec3-450a-b79b-7ab61b45044c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:51:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8257dec7-7ec3-450a-b79b-7ab61b45044c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:51:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8257dec7-7ec3-450a-b79b-7ab61b45044c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:51:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8257dec7-7ec3-450a-b79b-7ab61b45044c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a65dee/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:51:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8257dec7-7ec3-450a-b79b-7ab61b45044c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T16:51:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8257dec7-7ec3-450a-b79b-7ab61b45044c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T16:51:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8257dec7-7ec3-450a-b79b-7ab61b45044c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e21d86"} {"level":"debug","ts":"2026-07-24T16:51:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8257dec7-7ec3-450a-b79b-7ab61b45044c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c8d70d5c-ded2-4f9f-81ba-a7a0cfc53138","keyName":"e2e-rate-a-e21d86","selected_subscription":"e2e-rate-iso-a-e21d86","selected_subscription_key":"ai-tenant-e2e-shared-a-a65dee/e2e-rate-iso-a-e21d86@ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a65dee","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e21d86","namespace":"ai-tenant-e2e-shared-a-a65dee","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T16:51:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8257dec7-7ec3-450a-b79b-7ab61b45044c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T16:51:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8257dec7-7ec3-450a-b79b-7ab61b45044c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T16:52:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"47f43f75-e4e3-4616-85a3-b547e016d589","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:41316","PortSpecifier":{"PortValue":41316}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"47f43f75-e4e3-4616-85a3-b547e016d589","method":"POST","path":"/ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee/v1/completions","host":"e2e-shared-a-a65dee.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T16:52:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"47f43f75-e4e3-4616-85a3-b547e016d589","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:41316","PortSpecifier":{"PortValue":41316}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784911920,"nanos":814866006},"http":{"id":"47f43f75-e4e3-4616-85a3-b547e016d589","method":"POST","headers":{":authority":"e2e-shared-a-a65dee.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T16:52:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"47f43f75-e4e3-4616-85a3-b547e016d589","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MPnvLsQbeQE3TdWH_TTNnmvBA510o7TpjSLhhJtBO2j2EPZMV6j2DbpBjdXJ"} {"level":"debug","ts":"2026-07-24T16:52:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"47f43f75-e4e3-4616-85a3-b547e016d589","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-MPnvLsQbeQE3TdWH_TTNnmvBA510o7TpjSLhhJtBO2j2EPZMV6j2DbpBjdXJ\"}"} {"level":"debug","ts":"2026-07-24T16:52:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"47f43f75-e4e3-4616-85a3-b547e016d589","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c8d70d5c-ded2-4f9f-81ba-a7a0cfc53138","keyName":"e2e-rate-a-e21d86","subscription":"e2e-rate-iso-a-e21d86","tenant":"e2e-shared-a-a65dee","userId":"c8d70d5c-ded2-4f9f-81ba-a7a0cfc53138","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T16:52:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"47f43f75-e4e3-4616-85a3-b547e016d589","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee\",\"requestedSubscription\":\"e2e-rate-iso-a-e21d86\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T16:52:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"47f43f75-e4e3-4616-85a3-b547e016d589","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a65dee","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e21d86","namespace":"ai-tenant-e2e-shared-a-a65dee","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee"}} {"level":"debug","ts":"2026-07-24T16:52:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"47f43f75-e4e3-4616-85a3-b547e016d589","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T16:52:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47f43f75-e4e3-4616-85a3-b547e016d589","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:52:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47f43f75-e4e3-4616-85a3-b547e016d589","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:52:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47f43f75-e4e3-4616-85a3-b547e016d589","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:52:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47f43f75-e4e3-4616-85a3-b547e016d589","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a65dee/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:52:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47f43f75-e4e3-4616-85a3-b547e016d589","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T16:52:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47f43f75-e4e3-4616-85a3-b547e016d589","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e21d86"} {"level":"debug","ts":"2026-07-24T16:52:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47f43f75-e4e3-4616-85a3-b547e016d589","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T16:52:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47f43f75-e4e3-4616-85a3-b547e016d589","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c8d70d5c-ded2-4f9f-81ba-a7a0cfc53138","keyName":"e2e-rate-a-e21d86","selected_subscription":"e2e-rate-iso-a-e21d86","selected_subscription_key":"ai-tenant-e2e-shared-a-a65dee/e2e-rate-iso-a-e21d86@ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a65dee","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e21d86","namespace":"ai-tenant-e2e-shared-a-a65dee","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T16:52:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"47f43f75-e4e3-4616-85a3-b547e016d589","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T16:52:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"47f43f75-e4e3-4616-85a3-b547e016d589","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T16:52:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3199e0f4-22cd-4fda-b88f-9cfad10f44e8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:41318","PortSpecifier":{"PortValue":41318}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3199e0f4-22cd-4fda-b88f-9cfad10f44e8","method":"POST","path":"/ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee/v1/completions","host":"e2e-shared-a-a65dee.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T16:52:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3199e0f4-22cd-4fda-b88f-9cfad10f44e8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:41318","PortSpecifier":{"PortValue":41318}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784911921,"nanos":892275189},"http":{"id":"3199e0f4-22cd-4fda-b88f-9cfad10f44e8","method":"POST","headers":{":authority":"e2e-shared-a-a65dee.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T16:52:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3199e0f4-22cd-4fda-b88f-9cfad10f44e8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MPnvLsQbeQE3TdWH_TTNnmvBA510o7TpjSLhhJtBO2j2EPZMV6j2DbpBjdXJ"} {"level":"debug","ts":"2026-07-24T16:52:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3199e0f4-22cd-4fda-b88f-9cfad10f44e8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-MPnvLsQbeQE3TdWH_TTNnmvBA510o7TpjSLhhJtBO2j2EPZMV6j2DbpBjdXJ\"}"} {"level":"debug","ts":"2026-07-24T16:52:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3199e0f4-22cd-4fda-b88f-9cfad10f44e8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c8d70d5c-ded2-4f9f-81ba-a7a0cfc53138","keyName":"e2e-rate-a-e21d86","subscription":"e2e-rate-iso-a-e21d86","tenant":"e2e-shared-a-a65dee","userId":"c8d70d5c-ded2-4f9f-81ba-a7a0cfc53138","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T16:52:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3199e0f4-22cd-4fda-b88f-9cfad10f44e8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee\",\"requestedSubscription\":\"e2e-rate-iso-a-e21d86\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T16:52:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3199e0f4-22cd-4fda-b88f-9cfad10f44e8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a65dee","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e21d86","namespace":"ai-tenant-e2e-shared-a-a65dee","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee"}} {"level":"debug","ts":"2026-07-24T16:52:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3199e0f4-22cd-4fda-b88f-9cfad10f44e8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T16:52:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3199e0f4-22cd-4fda-b88f-9cfad10f44e8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:52:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3199e0f4-22cd-4fda-b88f-9cfad10f44e8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:52:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3199e0f4-22cd-4fda-b88f-9cfad10f44e8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:52:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3199e0f4-22cd-4fda-b88f-9cfad10f44e8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a65dee/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:52:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3199e0f4-22cd-4fda-b88f-9cfad10f44e8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T16:52:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3199e0f4-22cd-4fda-b88f-9cfad10f44e8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T16:52:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3199e0f4-22cd-4fda-b88f-9cfad10f44e8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e21d86"} {"level":"debug","ts":"2026-07-24T16:52:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3199e0f4-22cd-4fda-b88f-9cfad10f44e8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c8d70d5c-ded2-4f9f-81ba-a7a0cfc53138","keyName":"e2e-rate-a-e21d86","selected_subscription":"e2e-rate-iso-a-e21d86","selected_subscription_key":"ai-tenant-e2e-shared-a-a65dee/e2e-rate-iso-a-e21d86@ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a65dee","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e21d86","namespace":"ai-tenant-e2e-shared-a-a65dee","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T16:52:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3199e0f4-22cd-4fda-b88f-9cfad10f44e8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T16:52:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3199e0f4-22cd-4fda-b88f-9cfad10f44e8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T16:52:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"40effec4-e62d-432a-8642-de8a5362c979","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:41320","PortSpecifier":{"PortValue":41320}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"40effec4-e62d-432a-8642-de8a5362c979","method":"POST","path":"/ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee/v1/completions","host":"e2e-shared-a-a65dee.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T16:52:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"40effec4-e62d-432a-8642-de8a5362c979","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:41320","PortSpecifier":{"PortValue":41320}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784911922,"nanos":941013611},"http":{"id":"40effec4-e62d-432a-8642-de8a5362c979","method":"POST","headers":{":authority":"e2e-shared-a-a65dee.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T16:52:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"40effec4-e62d-432a-8642-de8a5362c979","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MPnvLsQbeQE3TdWH_TTNnmvBA510o7TpjSLhhJtBO2j2EPZMV6j2DbpBjdXJ"} {"level":"debug","ts":"2026-07-24T16:52:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"40effec4-e62d-432a-8642-de8a5362c979","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-MPnvLsQbeQE3TdWH_TTNnmvBA510o7TpjSLhhJtBO2j2EPZMV6j2DbpBjdXJ\"}"} {"level":"debug","ts":"2026-07-24T16:52:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"40effec4-e62d-432a-8642-de8a5362c979","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c8d70d5c-ded2-4f9f-81ba-a7a0cfc53138","keyName":"e2e-rate-a-e21d86","subscription":"e2e-rate-iso-a-e21d86","tenant":"e2e-shared-a-a65dee","userId":"c8d70d5c-ded2-4f9f-81ba-a7a0cfc53138","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T16:52:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"40effec4-e62d-432a-8642-de8a5362c979","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee\",\"requestedSubscription\":\"e2e-rate-iso-a-e21d86\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T16:52:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"40effec4-e62d-432a-8642-de8a5362c979","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a65dee","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e21d86","namespace":"ai-tenant-e2e-shared-a-a65dee","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee"}} {"level":"debug","ts":"2026-07-24T16:52:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"40effec4-e62d-432a-8642-de8a5362c979","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T16:52:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40effec4-e62d-432a-8642-de8a5362c979","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:52:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40effec4-e62d-432a-8642-de8a5362c979","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:52:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40effec4-e62d-432a-8642-de8a5362c979","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a65dee/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:52:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40effec4-e62d-432a-8642-de8a5362c979","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:52:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40effec4-e62d-432a-8642-de8a5362c979","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T16:52:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40effec4-e62d-432a-8642-de8a5362c979","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e21d86"} {"level":"debug","ts":"2026-07-24T16:52:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40effec4-e62d-432a-8642-de8a5362c979","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T16:52:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40effec4-e62d-432a-8642-de8a5362c979","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c8d70d5c-ded2-4f9f-81ba-a7a0cfc53138","keyName":"e2e-rate-a-e21d86","selected_subscription":"e2e-rate-iso-a-e21d86","selected_subscription_key":"ai-tenant-e2e-shared-a-a65dee/e2e-rate-iso-a-e21d86@ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a65dee","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e21d86","namespace":"ai-tenant-e2e-shared-a-a65dee","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T16:52:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"40effec4-e62d-432a-8642-de8a5362c979","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T16:52:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"40effec4-e62d-432a-8642-de8a5362c979","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T16:52:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"00b476ca-21dd-4ac0-9e4b-ca9546713659","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:41332","PortSpecifier":{"PortValue":41332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"00b476ca-21dd-4ac0-9e4b-ca9546713659","method":"POST","path":"/ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee/v1/completions","host":"e2e-shared-a-a65dee.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T16:52:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"00b476ca-21dd-4ac0-9e4b-ca9546713659","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:41332","PortSpecifier":{"PortValue":41332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784911923,"nanos":978629848},"http":{"id":"00b476ca-21dd-4ac0-9e4b-ca9546713659","method":"POST","headers":{":authority":"e2e-shared-a-a65dee.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T16:52:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"00b476ca-21dd-4ac0-9e4b-ca9546713659","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MPnvLsQbeQE3TdWH_TTNnmvBA510o7TpjSLhhJtBO2j2EPZMV6j2DbpBjdXJ"} {"level":"debug","ts":"2026-07-24T16:52:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"00b476ca-21dd-4ac0-9e4b-ca9546713659","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-MPnvLsQbeQE3TdWH_TTNnmvBA510o7TpjSLhhJtBO2j2EPZMV6j2DbpBjdXJ\"}"} {"level":"debug","ts":"2026-07-24T16:52:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"00b476ca-21dd-4ac0-9e4b-ca9546713659","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c8d70d5c-ded2-4f9f-81ba-a7a0cfc53138","keyName":"e2e-rate-a-e21d86","subscription":"e2e-rate-iso-a-e21d86","tenant":"e2e-shared-a-a65dee","userId":"c8d70d5c-ded2-4f9f-81ba-a7a0cfc53138","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T16:52:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"00b476ca-21dd-4ac0-9e4b-ca9546713659","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee\",\"requestedSubscription\":\"e2e-rate-iso-a-e21d86\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T16:52:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"00b476ca-21dd-4ac0-9e4b-ca9546713659","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a65dee","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e21d86","namespace":"ai-tenant-e2e-shared-a-a65dee","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee"}} {"level":"debug","ts":"2026-07-24T16:52:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"00b476ca-21dd-4ac0-9e4b-ca9546713659","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T16:52:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00b476ca-21dd-4ac0-9e4b-ca9546713659","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:52:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00b476ca-21dd-4ac0-9e4b-ca9546713659","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:52:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00b476ca-21dd-4ac0-9e4b-ca9546713659","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:52:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00b476ca-21dd-4ac0-9e4b-ca9546713659","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a65dee/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:52:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00b476ca-21dd-4ac0-9e4b-ca9546713659","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T16:52:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00b476ca-21dd-4ac0-9e4b-ca9546713659","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e21d86"} {"level":"debug","ts":"2026-07-24T16:52:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00b476ca-21dd-4ac0-9e4b-ca9546713659","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T16:52:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00b476ca-21dd-4ac0-9e4b-ca9546713659","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c8d70d5c-ded2-4f9f-81ba-a7a0cfc53138","keyName":"e2e-rate-a-e21d86","selected_subscription":"e2e-rate-iso-a-e21d86","selected_subscription_key":"ai-tenant-e2e-shared-a-a65dee/e2e-rate-iso-a-e21d86@ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a65dee","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e21d86","namespace":"ai-tenant-e2e-shared-a-a65dee","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T16:52:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"00b476ca-21dd-4ac0-9e4b-ca9546713659","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T16:52:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"00b476ca-21dd-4ac0-9e4b-ca9546713659","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T16:52:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"00bc0ac3-5a15-4056-b9a5-f27a324ea0f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:43480","PortSpecifier":{"PortValue":43480}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"00bc0ac3-5a15-4056-b9a5-f27a324ea0f8","method":"POST","path":"/ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee/v1/completions","host":"e2e-shared-a-a65dee.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T16:52:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"00bc0ac3-5a15-4056-b9a5-f27a324ea0f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:43480","PortSpecifier":{"PortValue":43480}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784911925,"nanos":18310244},"http":{"id":"00bc0ac3-5a15-4056-b9a5-f27a324ea0f8","method":"POST","headers":{":authority":"e2e-shared-a-a65dee.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T16:52:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"00bc0ac3-5a15-4056-b9a5-f27a324ea0f8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MPnvLsQbeQE3TdWH_TTNnmvBA510o7TpjSLhhJtBO2j2EPZMV6j2DbpBjdXJ"} {"level":"debug","ts":"2026-07-24T16:52:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"00bc0ac3-5a15-4056-b9a5-f27a324ea0f8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-MPnvLsQbeQE3TdWH_TTNnmvBA510o7TpjSLhhJtBO2j2EPZMV6j2DbpBjdXJ\"}"} {"level":"debug","ts":"2026-07-24T16:52:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"00bc0ac3-5a15-4056-b9a5-f27a324ea0f8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c8d70d5c-ded2-4f9f-81ba-a7a0cfc53138","keyName":"e2e-rate-a-e21d86","subscription":"e2e-rate-iso-a-e21d86","tenant":"e2e-shared-a-a65dee","userId":"c8d70d5c-ded2-4f9f-81ba-a7a0cfc53138","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T16:52:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"00bc0ac3-5a15-4056-b9a5-f27a324ea0f8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee\",\"requestedSubscription\":\"e2e-rate-iso-a-e21d86\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T16:52:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"00bc0ac3-5a15-4056-b9a5-f27a324ea0f8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a65dee","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e21d86","namespace":"ai-tenant-e2e-shared-a-a65dee","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee"}} {"level":"debug","ts":"2026-07-24T16:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"00bc0ac3-5a15-4056-b9a5-f27a324ea0f8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T16:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00bc0ac3-5a15-4056-b9a5-f27a324ea0f8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00bc0ac3-5a15-4056-b9a5-f27a324ea0f8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00bc0ac3-5a15-4056-b9a5-f27a324ea0f8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00bc0ac3-5a15-4056-b9a5-f27a324ea0f8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a65dee/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:52:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00bc0ac3-5a15-4056-b9a5-f27a324ea0f8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T16:52:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00bc0ac3-5a15-4056-b9a5-f27a324ea0f8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e21d86"} {"level":"debug","ts":"2026-07-24T16:52:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00bc0ac3-5a15-4056-b9a5-f27a324ea0f8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T16:52:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00bc0ac3-5a15-4056-b9a5-f27a324ea0f8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c8d70d5c-ded2-4f9f-81ba-a7a0cfc53138","keyName":"e2e-rate-a-e21d86","selected_subscription":"e2e-rate-iso-a-e21d86","selected_subscription_key":"ai-tenant-e2e-shared-a-a65dee/e2e-rate-iso-a-e21d86@ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a65dee","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e21d86","namespace":"ai-tenant-e2e-shared-a-a65dee","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T16:52:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"00bc0ac3-5a15-4056-b9a5-f27a324ea0f8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T16:52:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"00bc0ac3-5a15-4056-b9a5-f27a324ea0f8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T16:52:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"12cb6183-48fd-4dbf-b480-6a7a41ff61bb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:43490","PortSpecifier":{"PortValue":43490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"12cb6183-48fd-4dbf-b480-6a7a41ff61bb","method":"POST","path":"/ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee/v1/completions","host":"e2e-shared-a-a65dee.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T16:52:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"12cb6183-48fd-4dbf-b480-6a7a41ff61bb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:43490","PortSpecifier":{"PortValue":43490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784911926,"nanos":58596410},"http":{"id":"12cb6183-48fd-4dbf-b480-6a7a41ff61bb","method":"POST","headers":{":authority":"e2e-shared-a-a65dee.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T16:52:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"12cb6183-48fd-4dbf-b480-6a7a41ff61bb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MPnvLsQbeQE3TdWH_TTNnmvBA510o7TpjSLhhJtBO2j2EPZMV6j2DbpBjdXJ"} {"level":"debug","ts":"2026-07-24T16:52:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"12cb6183-48fd-4dbf-b480-6a7a41ff61bb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-MPnvLsQbeQE3TdWH_TTNnmvBA510o7TpjSLhhJtBO2j2EPZMV6j2DbpBjdXJ\"}"} {"level":"debug","ts":"2026-07-24T16:52:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"12cb6183-48fd-4dbf-b480-6a7a41ff61bb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c8d70d5c-ded2-4f9f-81ba-a7a0cfc53138","keyName":"e2e-rate-a-e21d86","subscription":"e2e-rate-iso-a-e21d86","tenant":"e2e-shared-a-a65dee","userId":"c8d70d5c-ded2-4f9f-81ba-a7a0cfc53138","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T16:52:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"12cb6183-48fd-4dbf-b480-6a7a41ff61bb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee\",\"requestedSubscription\":\"e2e-rate-iso-a-e21d86\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T16:52:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"12cb6183-48fd-4dbf-b480-6a7a41ff61bb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a65dee","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e21d86","namespace":"ai-tenant-e2e-shared-a-a65dee","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee"}} {"level":"debug","ts":"2026-07-24T16:52:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"12cb6183-48fd-4dbf-b480-6a7a41ff61bb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T16:52:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"12cb6183-48fd-4dbf-b480-6a7a41ff61bb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:52:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"12cb6183-48fd-4dbf-b480-6a7a41ff61bb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:52:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"12cb6183-48fd-4dbf-b480-6a7a41ff61bb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a65dee/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:52:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"12cb6183-48fd-4dbf-b480-6a7a41ff61bb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:52:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"12cb6183-48fd-4dbf-b480-6a7a41ff61bb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e21d86"} {"level":"debug","ts":"2026-07-24T16:52:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"12cb6183-48fd-4dbf-b480-6a7a41ff61bb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T16:52:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"12cb6183-48fd-4dbf-b480-6a7a41ff61bb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T16:52:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"12cb6183-48fd-4dbf-b480-6a7a41ff61bb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c8d70d5c-ded2-4f9f-81ba-a7a0cfc53138","keyName":"e2e-rate-a-e21d86","selected_subscription":"e2e-rate-iso-a-e21d86","selected_subscription_key":"ai-tenant-e2e-shared-a-a65dee/e2e-rate-iso-a-e21d86@ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a65dee","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e21d86","namespace":"ai-tenant-e2e-shared-a-a65dee","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T16:52:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"12cb6183-48fd-4dbf-b480-6a7a41ff61bb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T16:52:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"12cb6183-48fd-4dbf-b480-6a7a41ff61bb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T16:52:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9f8d1104-7552-4795-bc8f-1f8f4f916cba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:43494","PortSpecifier":{"PortValue":43494}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9f8d1104-7552-4795-bc8f-1f8f4f916cba","method":"POST","path":"/ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee/v1/completions","host":"e2e-shared-a-a65dee.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T16:52:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9f8d1104-7552-4795-bc8f-1f8f4f916cba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:43494","PortSpecifier":{"PortValue":43494}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784911927,"nanos":100140360},"http":{"id":"9f8d1104-7552-4795-bc8f-1f8f4f916cba","method":"POST","headers":{":authority":"e2e-shared-a-a65dee.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T16:52:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9f8d1104-7552-4795-bc8f-1f8f4f916cba","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MPnvLsQbeQE3TdWH_TTNnmvBA510o7TpjSLhhJtBO2j2EPZMV6j2DbpBjdXJ"} {"level":"debug","ts":"2026-07-24T16:52:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9f8d1104-7552-4795-bc8f-1f8f4f916cba","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-MPnvLsQbeQE3TdWH_TTNnmvBA510o7TpjSLhhJtBO2j2EPZMV6j2DbpBjdXJ\"}"} {"level":"debug","ts":"2026-07-24T16:52:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9f8d1104-7552-4795-bc8f-1f8f4f916cba","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c8d70d5c-ded2-4f9f-81ba-a7a0cfc53138","keyName":"e2e-rate-a-e21d86","subscription":"e2e-rate-iso-a-e21d86","tenant":"e2e-shared-a-a65dee","userId":"c8d70d5c-ded2-4f9f-81ba-a7a0cfc53138","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T16:52:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9f8d1104-7552-4795-bc8f-1f8f4f916cba","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee\",\"requestedSubscription\":\"e2e-rate-iso-a-e21d86\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T16:52:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9f8d1104-7552-4795-bc8f-1f8f4f916cba","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a65dee","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e21d86","namespace":"ai-tenant-e2e-shared-a-a65dee","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee"}} {"level":"debug","ts":"2026-07-24T16:52:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9f8d1104-7552-4795-bc8f-1f8f4f916cba","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T16:52:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f8d1104-7552-4795-bc8f-1f8f4f916cba","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:52:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f8d1104-7552-4795-bc8f-1f8f4f916cba","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:52:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f8d1104-7552-4795-bc8f-1f8f4f916cba","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:52:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f8d1104-7552-4795-bc8f-1f8f4f916cba","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a65dee/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:52:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f8d1104-7552-4795-bc8f-1f8f4f916cba","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T16:52:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f8d1104-7552-4795-bc8f-1f8f4f916cba","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T16:52:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f8d1104-7552-4795-bc8f-1f8f4f916cba","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e21d86"} {"level":"debug","ts":"2026-07-24T16:52:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f8d1104-7552-4795-bc8f-1f8f4f916cba","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c8d70d5c-ded2-4f9f-81ba-a7a0cfc53138","keyName":"e2e-rate-a-e21d86","selected_subscription":"e2e-rate-iso-a-e21d86","selected_subscription_key":"ai-tenant-e2e-shared-a-a65dee/e2e-rate-iso-a-e21d86@ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a65dee","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e21d86","namespace":"ai-tenant-e2e-shared-a-a65dee","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T16:52:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9f8d1104-7552-4795-bc8f-1f8f4f916cba","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T16:52:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9f8d1104-7552-4795-bc8f-1f8f4f916cba","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T16:52:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fbeffd18-0ec9-4ece-bd4c-e884f1719cc8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:43506","PortSpecifier":{"PortValue":43506}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fbeffd18-0ec9-4ece-bd4c-e884f1719cc8","method":"POST","path":"/ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee/v1/completions","host":"e2e-shared-a-a65dee.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T16:52:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fbeffd18-0ec9-4ece-bd4c-e884f1719cc8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:43506","PortSpecifier":{"PortValue":43506}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784911928,"nanos":138290590},"http":{"id":"fbeffd18-0ec9-4ece-bd4c-e884f1719cc8","method":"POST","headers":{":authority":"e2e-shared-a-a65dee.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T16:52:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fbeffd18-0ec9-4ece-bd4c-e884f1719cc8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MPnvLsQbeQE3TdWH_TTNnmvBA510o7TpjSLhhJtBO2j2EPZMV6j2DbpBjdXJ"} {"level":"debug","ts":"2026-07-24T16:52:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fbeffd18-0ec9-4ece-bd4c-e884f1719cc8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-MPnvLsQbeQE3TdWH_TTNnmvBA510o7TpjSLhhJtBO2j2EPZMV6j2DbpBjdXJ\"}"} {"level":"debug","ts":"2026-07-24T16:52:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fbeffd18-0ec9-4ece-bd4c-e884f1719cc8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c8d70d5c-ded2-4f9f-81ba-a7a0cfc53138","keyName":"e2e-rate-a-e21d86","subscription":"e2e-rate-iso-a-e21d86","tenant":"e2e-shared-a-a65dee","userId":"c8d70d5c-ded2-4f9f-81ba-a7a0cfc53138","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T16:52:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fbeffd18-0ec9-4ece-bd4c-e884f1719cc8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee\",\"requestedSubscription\":\"e2e-rate-iso-a-e21d86\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T16:52:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fbeffd18-0ec9-4ece-bd4c-e884f1719cc8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a65dee","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e21d86","namespace":"ai-tenant-e2e-shared-a-a65dee","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee"}} {"level":"debug","ts":"2026-07-24T16:52:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fbeffd18-0ec9-4ece-bd4c-e884f1719cc8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T16:52:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbeffd18-0ec9-4ece-bd4c-e884f1719cc8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:52:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbeffd18-0ec9-4ece-bd4c-e884f1719cc8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:52:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbeffd18-0ec9-4ece-bd4c-e884f1719cc8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a65dee/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:52:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbeffd18-0ec9-4ece-bd4c-e884f1719cc8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:52:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fbeffd18-0ec9-4ece-bd4c-e884f1719cc8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T16:52:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fbeffd18-0ec9-4ece-bd4c-e884f1719cc8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T16:52:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fbeffd18-0ec9-4ece-bd4c-e884f1719cc8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e21d86"} {"level":"debug","ts":"2026-07-24T16:52:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fbeffd18-0ec9-4ece-bd4c-e884f1719cc8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c8d70d5c-ded2-4f9f-81ba-a7a0cfc53138","keyName":"e2e-rate-a-e21d86","selected_subscription":"e2e-rate-iso-a-e21d86","selected_subscription_key":"ai-tenant-e2e-shared-a-a65dee/e2e-rate-iso-a-e21d86@ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a65dee","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e21d86","namespace":"ai-tenant-e2e-shared-a-a65dee","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T16:52:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fbeffd18-0ec9-4ece-bd4c-e884f1719cc8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T16:52:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fbeffd18-0ec9-4ece-bd4c-e884f1719cc8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T16:52:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"067caeda-8604-413d-a4b7-72f7a59bce40","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:43508","PortSpecifier":{"PortValue":43508}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"067caeda-8604-413d-a4b7-72f7a59bce40","method":"POST","path":"/ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee/v1/completions","host":"e2e-shared-a-a65dee.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T16:52:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"067caeda-8604-413d-a4b7-72f7a59bce40","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:43508","PortSpecifier":{"PortValue":43508}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784911929,"nanos":181011606},"http":{"id":"067caeda-8604-413d-a4b7-72f7a59bce40","method":"POST","headers":{":authority":"e2e-shared-a-a65dee.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T16:52:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"067caeda-8604-413d-a4b7-72f7a59bce40","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MPnvLsQbeQE3TdWH_TTNnmvBA510o7TpjSLhhJtBO2j2EPZMV6j2DbpBjdXJ"} {"level":"debug","ts":"2026-07-24T16:52:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"067caeda-8604-413d-a4b7-72f7a59bce40","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-MPnvLsQbeQE3TdWH_TTNnmvBA510o7TpjSLhhJtBO2j2EPZMV6j2DbpBjdXJ\"}"} {"level":"debug","ts":"2026-07-24T16:52:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"067caeda-8604-413d-a4b7-72f7a59bce40","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c8d70d5c-ded2-4f9f-81ba-a7a0cfc53138","keyName":"e2e-rate-a-e21d86","subscription":"e2e-rate-iso-a-e21d86","tenant":"e2e-shared-a-a65dee","userId":"c8d70d5c-ded2-4f9f-81ba-a7a0cfc53138","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T16:52:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"067caeda-8604-413d-a4b7-72f7a59bce40","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee\",\"requestedSubscription\":\"e2e-rate-iso-a-e21d86\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T16:52:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"067caeda-8604-413d-a4b7-72f7a59bce40","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a65dee","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e21d86","namespace":"ai-tenant-e2e-shared-a-a65dee","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee"}} {"level":"debug","ts":"2026-07-24T16:52:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"067caeda-8604-413d-a4b7-72f7a59bce40","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T16:52:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"067caeda-8604-413d-a4b7-72f7a59bce40","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:52:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"067caeda-8604-413d-a4b7-72f7a59bce40","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:52:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"067caeda-8604-413d-a4b7-72f7a59bce40","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a65dee/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:52:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"067caeda-8604-413d-a4b7-72f7a59bce40","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:52:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"067caeda-8604-413d-a4b7-72f7a59bce40","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T16:52:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"067caeda-8604-413d-a4b7-72f7a59bce40","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e21d86"} {"level":"debug","ts":"2026-07-24T16:52:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"067caeda-8604-413d-a4b7-72f7a59bce40","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T16:52:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"067caeda-8604-413d-a4b7-72f7a59bce40","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c8d70d5c-ded2-4f9f-81ba-a7a0cfc53138","keyName":"e2e-rate-a-e21d86","selected_subscription":"e2e-rate-iso-a-e21d86","selected_subscription_key":"ai-tenant-e2e-shared-a-a65dee/e2e-rate-iso-a-e21d86@ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a65dee","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e21d86","namespace":"ai-tenant-e2e-shared-a-a65dee","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T16:52:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"067caeda-8604-413d-a4b7-72f7a59bce40","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T16:52:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"067caeda-8604-413d-a4b7-72f7a59bce40","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T16:52:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"beb0604e-4e89-9f00-83e0-1defe8f7f20c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:43522","PortSpecifier":{"PortValue":43522}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"beb0604e-4e89-9f00-83e0-1defe8f7f20c","method":"POST","path":"/ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee/v1/completions","host":"e2e-shared-a-a65dee.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T16:52:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"beb0604e-4e89-9f00-83e0-1defe8f7f20c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:43522","PortSpecifier":{"PortValue":43522}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784911930,"nanos":219844041},"http":{"id":"beb0604e-4e89-9f00-83e0-1defe8f7f20c","method":"POST","headers":{":authority":"e2e-shared-a-a65dee.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T16:52:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"beb0604e-4e89-9f00-83e0-1defe8f7f20c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MPnvLsQbeQE3TdWH_TTNnmvBA510o7TpjSLhhJtBO2j2EPZMV6j2DbpBjdXJ"} {"level":"debug","ts":"2026-07-24T16:52:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"beb0604e-4e89-9f00-83e0-1defe8f7f20c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-MPnvLsQbeQE3TdWH_TTNnmvBA510o7TpjSLhhJtBO2j2EPZMV6j2DbpBjdXJ\"}"} {"level":"debug","ts":"2026-07-24T16:52:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"beb0604e-4e89-9f00-83e0-1defe8f7f20c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c8d70d5c-ded2-4f9f-81ba-a7a0cfc53138","keyName":"e2e-rate-a-e21d86","subscription":"e2e-rate-iso-a-e21d86","tenant":"e2e-shared-a-a65dee","userId":"c8d70d5c-ded2-4f9f-81ba-a7a0cfc53138","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T16:52:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"beb0604e-4e89-9f00-83e0-1defe8f7f20c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee\",\"requestedSubscription\":\"e2e-rate-iso-a-e21d86\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T16:52:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"beb0604e-4e89-9f00-83e0-1defe8f7f20c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a65dee.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a65dee","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e21d86","namespace":"ai-tenant-e2e-shared-a-a65dee","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee"}} {"level":"debug","ts":"2026-07-24T16:52:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"beb0604e-4e89-9f00-83e0-1defe8f7f20c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T16:52:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"beb0604e-4e89-9f00-83e0-1defe8f7f20c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:52:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"beb0604e-4e89-9f00-83e0-1defe8f7f20c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:52:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"beb0604e-4e89-9f00-83e0-1defe8f7f20c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:52:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"beb0604e-4e89-9f00-83e0-1defe8f7f20c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a65dee/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:52:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"beb0604e-4e89-9f00-83e0-1defe8f7f20c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T16:52:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"beb0604e-4e89-9f00-83e0-1defe8f7f20c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e21d86"} {"level":"debug","ts":"2026-07-24T16:52:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"beb0604e-4e89-9f00-83e0-1defe8f7f20c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T16:52:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"beb0604e-4e89-9f00-83e0-1defe8f7f20c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c8d70d5c-ded2-4f9f-81ba-a7a0cfc53138","keyName":"e2e-rate-a-e21d86","selected_subscription":"e2e-rate-iso-a-e21d86","selected_subscription_key":"ai-tenant-e2e-shared-a-a65dee/e2e-rate-iso-a-e21d86@ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a65dee","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e21d86","namespace":"ai-tenant-e2e-shared-a-a65dee","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a65dee/rate-test-model-a65dee"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T16:52:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"beb0604e-4e89-9f00-83e0-1defe8f7f20c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T16:52:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"beb0604e-4e89-9f00-83e0-1defe8f7f20c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T16:52:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7b13b5aa-eca6-4f8c-80f3-dc56edfe752d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:39906","PortSpecifier":{"PortValue":39906}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7b13b5aa-eca6-4f8c-80f3-dc56edfe752d","method":"POST","path":"/ai-tenant-e2e-shared-b-a29da6/rate-test-model-a29da6/v1/completions","host":"e2e-shared-b-a29da6.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T16:52:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7b13b5aa-eca6-4f8c-80f3-dc56edfe752d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:39906","PortSpecifier":{"PortValue":39906}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784911930,"nanos":259093368},"http":{"id":"7b13b5aa-eca6-4f8c-80f3-dc56edfe752d","method":"POST","headers":{":authority":"e2e-shared-b-a29da6.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-a29da6/rate-test-model-a29da6/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T16:52:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7b13b5aa-eca6-4f8c-80f3-dc56edfe752d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-y1eM08ZFhKXCAN9K_gXhRN6HpFd5mesxwGgtisVZMhFkJxQLddTS0kbCzEW9"} {"level":"debug","ts":"2026-07-24T16:52:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7b13b5aa-eca6-4f8c-80f3-dc56edfe752d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-a29da6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-y1eM08ZFhKXCAN9K_gXhRN6HpFd5mesxwGgtisVZMhFkJxQLddTS0kbCzEW9\"}"} {"level":"debug","ts":"2026-07-24T16:52:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7b13b5aa-eca6-4f8c-80f3-dc56edfe752d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-a29da6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"265ed9fe-1de9-4951-95cf-006cacce8189","keyName":"e2e-rate-b-e21d86","subscription":"e2e-rate-iso-b-e21d86","tenant":"e2e-shared-b-a29da6","userId":"265ed9fe-1de9-4951-95cf-006cacce8189","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T16:52:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7b13b5aa-eca6-4f8c-80f3-dc56edfe752d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-a29da6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-a29da6/rate-test-model-a29da6\",\"requestedSubscription\":\"e2e-rate-iso-b-e21d86\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T16:52:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7b13b5aa-eca6-4f8c-80f3-dc56edfe752d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-a29da6.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a29da6","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-e21d86","namespace":"ai-tenant-e2e-shared-b-a29da6","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-a29da6/rate-test-model-a29da6"}} {"level":"debug","ts":"2026-07-24T16:52:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7b13b5aa-eca6-4f8c-80f3-dc56edfe752d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T16:52:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7b13b5aa-eca6-4f8c-80f3-dc56edfe752d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:52:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7b13b5aa-eca6-4f8c-80f3-dc56edfe752d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:52:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7b13b5aa-eca6-4f8c-80f3-dc56edfe752d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:52:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7b13b5aa-eca6-4f8c-80f3-dc56edfe752d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a29da6/rate-test-model-a29da6\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a29da6/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:52:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7b13b5aa-eca6-4f8c-80f3-dc56edfe752d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T16:52:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7b13b5aa-eca6-4f8c-80f3-dc56edfe752d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-e21d86"} {"level":"debug","ts":"2026-07-24T16:52:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7b13b5aa-eca6-4f8c-80f3-dc56edfe752d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T16:52:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7b13b5aa-eca6-4f8c-80f3-dc56edfe752d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"265ed9fe-1de9-4951-95cf-006cacce8189","keyName":"e2e-rate-b-e21d86","selected_subscription":"e2e-rate-iso-b-e21d86","selected_subscription_key":"ai-tenant-e2e-shared-b-a29da6/e2e-rate-iso-b-e21d86@ai-tenant-e2e-shared-b-a29da6/rate-test-model-a29da6","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a29da6","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-e21d86","namespace":"ai-tenant-e2e-shared-b-a29da6","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-a29da6/rate-test-model-a29da6"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T16:52:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7b13b5aa-eca6-4f8c-80f3-dc56edfe752d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T16:52:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7b13b5aa-eca6-4f8c-80f3-dc56edfe752d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T16:52:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9ec4a1a20f711cb28992864c3e80ab8a3d4c337050c268a74ed98747f5385593"} {"level":"info","ts":"2026-07-24T16:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ab38af1ebba7afb1bbe00772f652cc39e698dcc174beb38b14eddb5a04d636b7"} {"level":"info","ts":"2026-07-24T16:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4785d683adbb6a5894cec9fdb6aa9d0a68a75dd673a67c3808cfb5c35981b344"} {"level":"info","ts":"2026-07-24T16:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/354f3ed6debc19b6ba1f4ab56557bf714dd4f669c31660e396a50da35dd423e5"} {"level":"info","ts":"2026-07-24T16:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2e3d6d6fe8085d0e36b8c7e1ce1dbc025ca573a8bc67c878679bdc9a96eb7280"} {"level":"info","ts":"2026-07-24T16:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ea5fe92f151339ad9fa27a1cbd8fdbd7a76cee4756eafd8c59f7f3aac13c4959"} {"level":"info","ts":"2026-07-24T16:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/41907e6c08a6b5cc322be47654b44f7e717a080f824e90e2483f76812021b0ee"} {"level":"info","ts":"2026-07-24T16:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b4c31d1597639eb1acd51e3ce2aedca35f7e39c8508d4a306c3e66bab139bc8d"} {"level":"info","ts":"2026-07-24T16:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4de63d7db2a0d4f3699a8f3132531d455b99de13e822dcf0cbd6045b8c4af455"} {"level":"info","ts":"2026-07-24T16:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/74696552c12d34adf48ac5ac1aec23e12817eb427be9fce4e52f90bd4f3589e3"} {"level":"info","ts":"2026-07-24T16:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2cfbfafe103518959b7d7e8c3a363c82da2df40b88d3e6a096ee5cde2b61bc9d"} {"level":"info","ts":"2026-07-24T16:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4515c5a3500677874d1a7b75c380a71033666da3cb739d9520a9e1be6e37187b"} {"level":"info","ts":"2026-07-24T16:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f5f7e43b9930f08a63a154efdc71eea032e11b7c401d5d1becc38657482bad87"} {"level":"info","ts":"2026-07-24T16:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9535f1df272fc59d4ca7028b82ef576d12cb87d8016b38dfcd749b2ab8ce6d56"} {"level":"info","ts":"2026-07-24T16:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c707b56b013cf433d5f99fcd6c0693dd9e5fed41396c5ce7511dc721f4df0895"} {"level":"info","ts":"2026-07-24T16:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/59ed048670e7865fa8680ff440b8b9696e1dcdebc78f14a652b5ebb6a17cad36"} {"level":"info","ts":"2026-07-24T16:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0859bd43ff0f301a33f8370a4dcf63821f0f9dd8b97c20e1723b59edc332fe5d"} {"level":"info","ts":"2026-07-24T16:52:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dae8d25f25c96a8a092b7debb6f4dddb561e03935f89ba76636596e154d18e51"} {"level":"info","ts":"2026-07-24T16:52:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c149b09b5b073bc00127c50664a04d6254286b8a8aa6d04b02836fb739c7fca2"} {"level":"info","ts":"2026-07-24T16:52:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad726d2d9dd4de3064708b6739e218236affcd8f1593d6ce7b6b11394f685593"} {"level":"info","ts":"2026-07-24T16:52:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ac4a11a47c4aafe958cc2004346f76e3de7218e09f2bafe535bc57accb051e52"} {"level":"info","ts":"2026-07-24T16:52:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/573e15b5295902f577d0142f8933da1c47e15a4d28cbb5226d048da5a3b0a513"} {"level":"info","ts":"2026-07-24T16:52:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1df62ca7954ce3199a8fb1cf952d160ed1cdaf653bd3c5053b9be632c2ebbeb2"} {"level":"info","ts":"2026-07-24T16:52:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/74f6a2c6cf4c49698e82fd072f8b62c26c96b22ab50c5539d0e16ef504d91b3b"} {"level":"info","ts":"2026-07-24T16:53:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4020085b-959a-429f-9c50-51e1bb94340d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:35552","PortSpecifier":{"PortValue":35552}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4020085b-959a-429f-9c50-51e1bb94340d","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T16:53:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4020085b-959a-429f-9c50-51e1bb94340d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:35552","PortSpecifier":{"PortValue":35552}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784912003,"nanos":844858591},"http":{"id":"4020085b-959a-429f-9c50-51e1bb94340d","method":"POST","headers":{":authority":"maas.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T16:53:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4020085b-959a-429f-9c50-51e1bb94340d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T16:53:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4020085b-959a-429f-9c50-51e1bb94340d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c6920799-9c3c-48b3-a3e6-1c1556efc9c4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=515021ea-127d-4968-9b2f-4957a9e43ba5"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cf20df43e4ca"]}} {"level":"debug","ts":"2026-07-24T16:53:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4020085b-959a-429f-9c50-51e1bb94340d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cf20df43e4ca"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=515021ea-127d-4968-9b2f-4957a9e43ba5"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c6920799-9c3c-48b3-a3e6-1c1556efc9c4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T16:53:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4020085b-959a-429f-9c50-51e1bb94340d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:53:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4020085b-959a-429f-9c50-51e1bb94340d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:53:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4020085b-959a-429f-9c50-51e1bb94340d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:53:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4020085b-959a-429f-9c50-51e1bb94340d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T16:53:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4020085b-959a-429f-9c50-51e1bb94340d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T16:53:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4020085b-959a-429f-9c50-51e1bb94340d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-24T16:53:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4020085b-959a-429f-9c50-51e1bb94340d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T16:53:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4020085b-959a-429f-9c50-51e1bb94340d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T16:53:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aec55de5-d7fd-4b91-95e4-e29b29bd4086","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:35554","PortSpecifier":{"PortValue":35554}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"aec55de5-d7fd-4b91-95e4-e29b29bd4086","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T16:53:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aec55de5-d7fd-4b91-95e4-e29b29bd4086","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:35554","PortSpecifier":{"PortValue":35554}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784912003,"nanos":895934939},"http":{"id":"aec55de5-d7fd-4b91-95e4-e29b29bd4086","method":"POST","headers":{":authority":"maas.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T16:53:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"aec55de5-d7fd-4b91-95e4-e29b29bd4086","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-12ZEkFzN3BewwavqP_pHgvDZeIFgWj1EK5kRYYGXUuUKqhzOX1yu9eI2BVe6m"} {"level":"debug","ts":"2026-07-24T16:53:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"aec55de5-d7fd-4b91-95e4-e29b29bd4086","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-12ZEkFzN3BewwavqP_pHgvDZeIFgWj1EK5kRYYGXUuUKqhzOX1yu9eI2BVe6m\"}"} {"level":"debug","ts":"2026-07-24T16:53:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"aec55de5-d7fd-4b91-95e4-e29b29bd4086","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"31f1df6c-1aa2-4ea7-afc3-68a414b491ad","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"31f1df6c-1aa2-4ea7-afc3-68a414b491ad","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T16:53:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"aec55de5-d7fd-4b91-95e4-e29b29bd4086","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T16:53:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"aec55de5-d7fd-4b91-95e4-e29b29bd4086","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}} {"level":"debug","ts":"2026-07-24T16:53:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"aec55de5-d7fd-4b91-95e4-e29b29bd4086","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T16:53:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aec55de5-d7fd-4b91-95e4-e29b29bd4086","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:53:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aec55de5-d7fd-4b91-95e4-e29b29bd4086","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:53:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aec55de5-d7fd-4b91-95e4-e29b29bd4086","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:53:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aec55de5-d7fd-4b91-95e4-e29b29bd4086","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:53:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aec55de5-d7fd-4b91-95e4-e29b29bd4086","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T16:53:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aec55de5-d7fd-4b91-95e4-e29b29bd4086","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T16:53:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aec55de5-d7fd-4b91-95e4-e29b29bd4086","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-07-24T16:53:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aec55de5-d7fd-4b91-95e4-e29b29bd4086","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"31f1df6c-1aa2-4ea7-afc3-68a414b491ad","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T16:53:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aec55de5-d7fd-4b91-95e4-e29b29bd4086","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T16:53:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aec55de5-d7fd-4b91-95e4-e29b29bd4086","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T16:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cca4b484a9dc5e3885d790f6b51798b532486b365b48127f4b24a1898cf227c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:53:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:53:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cca4b484a9dc5e3885d790f6b51798b532486b365b48127f4b24a1898cf227c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cca4b484a9dc5e3885d790f6b51798b532486b365b48127f4b24a1898cf227c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cca4b484a9dc5e3885d790f6b51798b532486b365b48127f4b24a1898cf227c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cca4b484a9dc5e3885d790f6b51798b532486b365b48127f4b24a1898cf227c"} {"level":"debug","ts":"2026-07-24T16:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cca4b484a9dc5e3885d790f6b51798b532486b365b48127f4b24a1898cf227c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cca4b484a9dc5e3885d790f6b51798b532486b365b48127f4b24a1898cf227c"} {"level":"debug","ts":"2026-07-24T16:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cca4b484a9dc5e3885d790f6b51798b532486b365b48127f4b24a1898cf227c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:53:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:53:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1cca4b484a9dc5e3885d790f6b51798b532486b365b48127f4b24a1898cf227c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cca4b484a9dc5e3885d790f6b51798b532486b365b48127f4b24a1898cf227c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cca4b484a9dc5e3885d790f6b51798b532486b365b48127f4b24a1898cf227c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:53:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:53:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cca4b484a9dc5e3885d790f6b51798b532486b365b48127f4b24a1898cf227c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cca4b484a9dc5e3885d790f6b51798b532486b365b48127f4b24a1898cf227c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cca4b484a9dc5e3885d790f6b51798b532486b365b48127f4b24a1898cf227c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cca4b484a9dc5e3885d790f6b51798b532486b365b48127f4b24a1898cf227c"} {"level":"debug","ts":"2026-07-24T16:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cca4b484a9dc5e3885d790f6b51798b532486b365b48127f4b24a1898cf227c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cca4b484a9dc5e3885d790f6b51798b532486b365b48127f4b24a1898cf227c"} {"level":"debug","ts":"2026-07-24T16:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cca4b484a9dc5e3885d790f6b51798b532486b365b48127f4b24a1898cf227c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:53:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:53:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1cca4b484a9dc5e3885d790f6b51798b532486b365b48127f4b24a1898cf227c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cca4b484a9dc5e3885d790f6b51798b532486b365b48127f4b24a1898cf227c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cca4b484a9dc5e3885d790f6b51798b532486b365b48127f4b24a1898cf227c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:53:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:53:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cca4b484a9dc5e3885d790f6b51798b532486b365b48127f4b24a1898cf227c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cca4b484a9dc5e3885d790f6b51798b532486b365b48127f4b24a1898cf227c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cca4b484a9dc5e3885d790f6b51798b532486b365b48127f4b24a1898cf227c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cca4b484a9dc5e3885d790f6b51798b532486b365b48127f4b24a1898cf227c"} {"level":"debug","ts":"2026-07-24T16:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cca4b484a9dc5e3885d790f6b51798b532486b365b48127f4b24a1898cf227c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cca4b484a9dc5e3885d790f6b51798b532486b365b48127f4b24a1898cf227c"} {"level":"debug","ts":"2026-07-24T16:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cca4b484a9dc5e3885d790f6b51798b532486b365b48127f4b24a1898cf227c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:53:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:53:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1cca4b484a9dc5e3885d790f6b51798b532486b365b48127f4b24a1898cf227c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cca4b484a9dc5e3885d790f6b51798b532486b365b48127f4b24a1898cf227c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cca4b484a9dc5e3885d790f6b51798b532486b365b48127f4b24a1898cf227c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cca4b484a9dc5e3885d790f6b51798b532486b365b48127f4b24a1898cf227c"} {"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"518ab03c4c0e12642a4860ed405d3a5b3a002d5598ff130799e403850554abcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"518ab03c4c0e12642a4860ed405d3a5b3a002d5598ff130799e403850554abcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"518ab03c4c0e12642a4860ed405d3a5b3a002d5598ff130799e403850554abcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"518ab03c4c0e12642a4860ed405d3a5b3a002d5598ff130799e403850554abcc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/518ab03c4c0e12642a4860ed405d3a5b3a002d5598ff130799e403850554abcc"} {"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"518ab03c4c0e12642a4860ed405d3a5b3a002d5598ff130799e403850554abcc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/518ab03c4c0e12642a4860ed405d3a5b3a002d5598ff130799e403850554abcc"} {"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"518ab03c4c0e12642a4860ed405d3a5b3a002d5598ff130799e403850554abcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["518ab03c4c0e12642a4860ed405d3a5b3a002d5598ff130799e403850554abcc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"518ab03c4c0e12642a4860ed405d3a5b3a002d5598ff130799e403850554abcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"518ab03c4c0e12642a4860ed405d3a5b3a002d5598ff130799e403850554abcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"518ab03c4c0e12642a4860ed405d3a5b3a002d5598ff130799e403850554abcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81a97687f39fdca4c8ac65c43fdac043f478aa20bf8c8922544911ee0fcd99f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/518ab03c4c0e12642a4860ed405d3a5b3a002d5598ff130799e403850554abcc"} {"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81a97687f39fdca4c8ac65c43fdac043f478aa20bf8c8922544911ee0fcd99f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"518ab03c4c0e12642a4860ed405d3a5b3a002d5598ff130799e403850554abcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["518ab03c4c0e12642a4860ed405d3a5b3a002d5598ff130799e403850554abcc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"518ab03c4c0e12642a4860ed405d3a5b3a002d5598ff130799e403850554abcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81a97687f39fdca4c8ac65c43fdac043f478aa20bf8c8922544911ee0fcd99f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81a97687f39fdca4c8ac65c43fdac043f478aa20bf8c8922544911ee0fcd99f5"} {"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81a97687f39fdca4c8ac65c43fdac043f478aa20bf8c8922544911ee0fcd99f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"518ab03c4c0e12642a4860ed405d3a5b3a002d5598ff130799e403850554abcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/518ab03c4c0e12642a4860ed405d3a5b3a002d5598ff130799e403850554abcc"} {"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"518ab03c4c0e12642a4860ed405d3a5b3a002d5598ff130799e403850554abcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81a97687f39fdca4c8ac65c43fdac043f478aa20bf8c8922544911ee0fcd99f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"518ab03c4c0e12642a4860ed405d3a5b3a002d5598ff130799e403850554abcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["518ab03c4c0e12642a4860ed405d3a5b3a002d5598ff130799e403850554abcc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81a97687f39fdca4c8ac65c43fdac043f478aa20bf8c8922544911ee0fcd99f5"} {"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"518ab03c4c0e12642a4860ed405d3a5b3a002d5598ff130799e403850554abcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81a97687f39fdca4c8ac65c43fdac043f478aa20bf8c8922544911ee0fcd99f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81a97687f39fdca4c8ac65c43fdac043f478aa20bf8c8922544911ee0fcd99f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/518ab03c4c0e12642a4860ed405d3a5b3a002d5598ff130799e403850554abcc"} {"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81a97687f39fdca4c8ac65c43fdac043f478aa20bf8c8922544911ee0fcd99f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"518ab03c4c0e12642a4860ed405d3a5b3a002d5598ff130799e403850554abcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/518ab03c4c0e12642a4860ed405d3a5b3a002d5598ff130799e403850554abcc"} {"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"518ab03c4c0e12642a4860ed405d3a5b3a002d5598ff130799e403850554abcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7dbfa15d6328c29f19024bbb93241b7a100c85449f8eb24889083eda19e139b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dbfa15d6328c29f19024bbb93241b7a100c85449f8eb24889083eda19e139b9"} {"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7dbfa15d6328c29f19024bbb93241b7a100c85449f8eb24889083eda19e139b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81a97687f39fdca4c8ac65c43fdac043f478aa20bf8c8922544911ee0fcd99f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81a97687f39fdca4c8ac65c43fdac043f478aa20bf8c8922544911ee0fcd99f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"372c5f8b66f6479c418c4fee2fc269c6ca1561da24d9df5297ea1f6c50d4d4a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81a97687f39fdca4c8ac65c43fdac043f478aa20bf8c8922544911ee0fcd99f5"} {"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"372c5f8b66f6479c418c4fee2fc269c6ca1561da24d9df5297ea1f6c50d4d4a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"518ab03c4c0e12642a4860ed405d3a5b3a002d5598ff130799e403850554abcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["518ab03c4c0e12642a4860ed405d3a5b3a002d5598ff130799e403850554abcc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"518ab03c4c0e12642a4860ed405d3a5b3a002d5598ff130799e403850554abcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7dbfa15d6328c29f19024bbb93241b7a100c85449f8eb24889083eda19e139b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7dbfa15d6328c29f19024bbb93241b7a100c85449f8eb24889083eda19e139b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/372c5f8b66f6479c418c4fee2fc269c6ca1561da24d9df5297ea1f6c50d4d4a9"} {"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7dbfa15d6328c29f19024bbb93241b7a100c85449f8eb24889083eda19e139b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81a97687f39fdca4c8ac65c43fdac043f478aa20bf8c8922544911ee0fcd99f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81a97687f39fdca4c8ac65c43fdac043f478aa20bf8c8922544911ee0fcd99f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81a97687f39fdca4c8ac65c43fdac043f478aa20bf8c8922544911ee0fcd99f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"372c5f8b66f6479c418c4fee2fc269c6ca1561da24d9df5297ea1f6c50d4d4a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["372c5f8b66f6479c418c4fee2fc269c6ca1561da24d9df5297ea1f6c50d4d4a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/518ab03c4c0e12642a4860ed405d3a5b3a002d5598ff130799e403850554abcc"} {"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"372c5f8b66f6479c418c4fee2fc269c6ca1561da24d9df5297ea1f6c50d4d4a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"518ab03c4c0e12642a4860ed405d3a5b3a002d5598ff130799e403850554abcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6fc20669ca76bedfc85658ba3e7938328b661a213c543a9f0918b9f6484e418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6fc20669ca76bedfc85658ba3e7938328b661a213c543a9f0918b9f6484e418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7dbfa15d6328c29f19024bbb93241b7a100c85449f8eb24889083eda19e139b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dbfa15d6328c29f19024bbb93241b7a100c85449f8eb24889083eda19e139b9"} {"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7dbfa15d6328c29f19024bbb93241b7a100c85449f8eb24889083eda19e139b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c26ae2bba021a2f951337f8fd7a27de62f2235afa79cec071cbaa4af3c8a0edc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c26ae2bba021a2f951337f8fd7a27de62f2235afa79cec071cbaa4af3c8a0edc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81a97687f39fdca4c8ac65c43fdac043f478aa20bf8c8922544911ee0fcd99f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81a97687f39fdca4c8ac65c43fdac043f478aa20bf8c8922544911ee0fcd99f5"} {"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81a97687f39fdca4c8ac65c43fdac043f478aa20bf8c8922544911ee0fcd99f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"372c5f8b66f6479c418c4fee2fc269c6ca1561da24d9df5297ea1f6c50d4d4a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"372c5f8b66f6479c418c4fee2fc269c6ca1561da24d9df5297ea1f6c50d4d4a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6fc20669ca76bedfc85658ba3e7938328b661a213c543a9f0918b9f6484e418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7dbfa15d6328c29f19024bbb93241b7a100c85449f8eb24889083eda19e139b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7dbfa15d6328c29f19024bbb93241b7a100c85449f8eb24889083eda19e139b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/372c5f8b66f6479c418c4fee2fc269c6ca1561da24d9df5297ea1f6c50d4d4a9"} {"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7dbfa15d6328c29f19024bbb93241b7a100c85449f8eb24889083eda19e139b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c26ae2bba021a2f951337f8fd7a27de62f2235afa79cec071cbaa4af3c8a0edc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81a97687f39fdca4c8ac65c43fdac043f478aa20bf8c8922544911ee0fcd99f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81a97687f39fdca4c8ac65c43fdac043f478aa20bf8c8922544911ee0fcd99f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81a97687f39fdca4c8ac65c43fdac043f478aa20bf8c8922544911ee0fcd99f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6878a7412574e3d81c52b1a688dbde2095d1a99eb538f3dd2a021f2e679bd2a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6fc20669ca76bedfc85658ba3e7938328b661a213c543a9f0918b9f6484e418"} {"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6878a7412574e3d81c52b1a688dbde2095d1a99eb538f3dd2a021f2e679bd2a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"372c5f8b66f6479c418c4fee2fc269c6ca1561da24d9df5297ea1f6c50d4d4a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["372c5f8b66f6479c418c4fee2fc269c6ca1561da24d9df5297ea1f6c50d4d4a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"372c5f8b66f6479c418c4fee2fc269c6ca1561da24d9df5297ea1f6c50d4d4a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4bee34857d9b8dfeeeea559b46f7a502c987b75056e6b62f5121587f327be48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c26ae2bba021a2f951337f8fd7a27de62f2235afa79cec071cbaa4af3c8a0edc"} {"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4bee34857d9b8dfeeeea559b46f7a502c987b75056e6b62f5121587f327be48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6fc20669ca76bedfc85658ba3e7938328b661a213c543a9f0918b9f6484e418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6fc20669ca76bedfc85658ba3e7938328b661a213c543a9f0918b9f6484e418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6fc20669ca76bedfc85658ba3e7938328b661a213c543a9f0918b9f6484e418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7dbfa15d6328c29f19024bbb93241b7a100c85449f8eb24889083eda19e139b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7dbfa15d6328c29f19024bbb93241b7a100c85449f8eb24889083eda19e139b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c26ae2bba021a2f951337f8fd7a27de62f2235afa79cec071cbaa4af3c8a0edc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c26ae2bba021a2f951337f8fd7a27de62f2235afa79cec071cbaa4af3c8a0edc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dbfa15d6328c29f19024bbb93241b7a100c85449f8eb24889083eda19e139b9"} {"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c26ae2bba021a2f951337f8fd7a27de62f2235afa79cec071cbaa4af3c8a0edc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81a97687f39fdca4c8ac65c43fdac043f478aa20bf8c8922544911ee0fcd99f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81a97687f39fdca4c8ac65c43fdac043f478aa20bf8c8922544911ee0fcd99f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6878a7412574e3d81c52b1a688dbde2095d1a99eb538f3dd2a021f2e679bd2a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"372c5f8b66f6479c418c4fee2fc269c6ca1561da24d9df5297ea1f6c50d4d4a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4bee34857d9b8dfeeeea559b46f7a502c987b75056e6b62f5121587f327be48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6fc20669ca76bedfc85658ba3e7938328b661a213c543a9f0918b9f6484e418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7dbfa15d6328c29f19024bbb93241b7a100c85449f8eb24889083eda19e139b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7dbfa15d6328c29f19024bbb93241b7a100c85449f8eb24889083eda19e139b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81a97687f39fdca4c8ac65c43fdac043f478aa20bf8c8922544911ee0fcd99f5"} {"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7dbfa15d6328c29f19024bbb93241b7a100c85449f8eb24889083eda19e139b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81699bb68175c724cc20eb0210bfe7122f7ab4b9354d04e1af381689fb7217a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81699bb68175c724cc20eb0210bfe7122f7ab4b9354d04e1af381689fb7217a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c26ae2bba021a2f951337f8fd7a27de62f2235afa79cec071cbaa4af3c8a0edc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81a97687f39fdca4c8ac65c43fdac043f478aa20bf8c8922544911ee0fcd99f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81a97687f39fdca4c8ac65c43fdac043f478aa20bf8c8922544911ee0fcd99f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6878a7412574e3d81c52b1a688dbde2095d1a99eb538f3dd2a021f2e679bd2a9"} {"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81a97687f39fdca4c8ac65c43fdac043f478aa20bf8c8922544911ee0fcd99f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6878a7412574e3d81c52b1a688dbde2095d1a99eb538f3dd2a021f2e679bd2a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6878a7412574e3d81c52b1a688dbde2095d1a99eb538f3dd2a021f2e679bd2a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6878a7412574e3d81c52b1a688dbde2095d1a99eb538f3dd2a021f2e679bd2a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4bee34857d9b8dfeeeea559b46f7a502c987b75056e6b62f5121587f327be48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4bee34857d9b8dfeeeea559b46f7a502c987b75056e6b62f5121587f327be48"} {"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4bee34857d9b8dfeeeea559b46f7a502c987b75056e6b62f5121587f327be48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7dbfa15d6328c29f19024bbb93241b7a100c85449f8eb24889083eda19e139b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81699bb68175c724cc20eb0210bfe7122f7ab4b9354d04e1af381689fb7217a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81a97687f39fdca4c8ac65c43fdac043f478aa20bf8c8922544911ee0fcd99f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6878a7412574e3d81c52b1a688dbde2095d1a99eb538f3dd2a021f2e679bd2a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4bee34857d9b8dfeeeea559b46f7a502c987b75056e6b62f5121587f327be48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4bee34857d9b8dfeeeea559b46f7a502c987b75056e6b62f5121587f327be48"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/372c5f8b66f6479c418c4fee2fc269c6ca1561da24d9df5297ea1f6c50d4d4a9"} {"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4bee34857d9b8dfeeeea559b46f7a502c987b75056e6b62f5121587f327be48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81699bb68175c724cc20eb0210bfe7122f7ab4b9354d04e1af381689fb7217a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4bee34857d9b8dfeeeea559b46f7a502c987b75056e6b62f5121587f327be48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4bee34857d9b8dfeeeea559b46f7a502c987b75056e6b62f5121587f327be48"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f4bee34857d9b8dfeeeea559b46f7a502c987b75056e6b62f5121587f327be48","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f4bee34857d9b8dfeeeea559b46f7a502c987b75056e6b62f5121587f327be48\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffb690167b6811ebffdcfe85c4c5bacac0fa0dfb4cc8565b54afe3d9fd8bb5f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffb690167b6811ebffdcfe85c4c5bacac0fa0dfb4cc8565b54afe3d9fd8bb5f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4bee34857d9b8dfeeeea559b46f7a502c987b75056e6b62f5121587f327be48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2bc630da1349d5e1e2855f04a10aab834c574672b987db9d194c64d6fd6eccf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6fc20669ca76bedfc85658ba3e7938328b661a213c543a9f0918b9f6484e418"} {"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2bc630da1349d5e1e2855f04a10aab834c574672b987db9d194c64d6fd6eccf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81699bb68175c724cc20eb0210bfe7122f7ab4b9354d04e1af381689fb7217a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffb690167b6811ebffdcfe85c4c5bacac0fa0dfb4cc8565b54afe3d9fd8bb5f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2bc630da1349d5e1e2855f04a10aab834c574672b987db9d194c64d6fd6eccf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2bc630da1349d5e1e2855f04a10aab834c574672b987db9d194c64d6fd6eccf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffb690167b6811ebffdcfe85c4c5bacac0fa0dfb4cc8565b54afe3d9fd8bb5f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2bc630da1349d5e1e2855f04a10aab834c574672b987db9d194c64d6fd6eccf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffb690167b6811ebffdcfe85c4c5bacac0fa0dfb4cc8565b54afe3d9fd8bb5f1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dbfa15d6328c29f19024bbb93241b7a100c85449f8eb24889083eda19e139b9"} {"level":"debug","ts":"2026-07-24T16:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81699bb68175c724cc20eb0210bfe7122f7ab4b9354d04e1af381689fb7217a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:53:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81699bb68175c724cc20eb0210bfe7122f7ab4b9354d04e1af381689fb7217a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81699bb68175c724cc20eb0210bfe7122f7ab4b9354d04e1af381689fb7217a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2bc630da1349d5e1e2855f04a10aab834c574672b987db9d194c64d6fd6eccf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffb690167b6811ebffdcfe85c4c5bacac0fa0dfb4cc8565b54afe3d9fd8bb5f1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81699bb68175c724cc20eb0210bfe7122f7ab4b9354d04e1af381689fb7217a3"} {"level":"info","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c26ae2bba021a2f951337f8fd7a27de62f2235afa79cec071cbaa4af3c8a0edc"} {"level":"info","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81a97687f39fdca4c8ac65c43fdac043f478aa20bf8c8922544911ee0fcd99f5"} {"level":"debug","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81699bb68175c724cc20eb0210bfe7122f7ab4b9354d04e1af381689fb7217a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:53:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:53:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81699bb68175c724cc20eb0210bfe7122f7ab4b9354d04e1af381689fb7217a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6878a7412574e3d81c52b1a688dbde2095d1a99eb538f3dd2a021f2e679bd2a9"} {"level":"info","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81699bb68175c724cc20eb0210bfe7122f7ab4b9354d04e1af381689fb7217a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81699bb68175c724cc20eb0210bfe7122f7ab4b9354d04e1af381689fb7217a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2bc630da1349d5e1e2855f04a10aab834c574672b987db9d194c64d6fd6eccf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffb690167b6811ebffdcfe85c4c5bacac0fa0dfb4cc8565b54afe3d9fd8bb5f1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4bee34857d9b8dfeeeea559b46f7a502c987b75056e6b62f5121587f327be48"} {"level":"info","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffb690167b6811ebffdcfe85c4c5bacac0fa0dfb4cc8565b54afe3d9fd8bb5f1"} {"level":"info","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2bc630da1349d5e1e2855f04a10aab834c574672b987db9d194c64d6fd6eccf"} {"level":"info","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81699bb68175c724cc20eb0210bfe7122f7ab4b9354d04e1af381689fb7217a3"} {"level":"debug","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2bc630da1349d5e1e2855f04a10aab834c574672b987db9d194c64d6fd6eccf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:53:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:53:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2bc630da1349d5e1e2855f04a10aab834c574672b987db9d194c64d6fd6eccf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2bc630da1349d5e1e2855f04a10aab834c574672b987db9d194c64d6fd6eccf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffb690167b6811ebffdcfe85c4c5bacac0fa0dfb4cc8565b54afe3d9fd8bb5f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:53:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:53:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffb690167b6811ebffdcfe85c4c5bacac0fa0dfb4cc8565b54afe3d9fd8bb5f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffb690167b6811ebffdcfe85c4c5bacac0fa0dfb4cc8565b54afe3d9fd8bb5f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2bc630da1349d5e1e2855f04a10aab834c574672b987db9d194c64d6fd6eccf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:53:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:53:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2bc630da1349d5e1e2855f04a10aab834c574672b987db9d194c64d6fd6eccf"} {"level":"info","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2bc630da1349d5e1e2855f04a10aab834c574672b987db9d194c64d6fd6eccf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffb690167b6811ebffdcfe85c4c5bacac0fa0dfb4cc8565b54afe3d9fd8bb5f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:53:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:53:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffb690167b6811ebffdcfe85c4c5bacac0fa0dfb4cc8565b54afe3d9fd8bb5f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2bc630da1349d5e1e2855f04a10aab834c574672b987db9d194c64d6fd6eccf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:53:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:53:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2bc630da1349d5e1e2855f04a10aab834c574672b987db9d194c64d6fd6eccf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffb690167b6811ebffdcfe85c4c5bacac0fa0dfb4cc8565b54afe3d9fd8bb5f1"} {"level":"info","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2bc630da1349d5e1e2855f04a10aab834c574672b987db9d194c64d6fd6eccf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffb690167b6811ebffdcfe85c4c5bacac0fa0dfb4cc8565b54afe3d9fd8bb5f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:53:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:53:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffb690167b6811ebffdcfe85c4c5bacac0fa0dfb4cc8565b54afe3d9fd8bb5f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffb690167b6811ebffdcfe85c4c5bacac0fa0dfb4cc8565b54afe3d9fd8bb5f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2bc630da1349d5e1e2855f04a10aab834c574672b987db9d194c64d6fd6eccf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:53:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:53:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2bc630da1349d5e1e2855f04a10aab834c574672b987db9d194c64d6fd6eccf"} {"level":"info","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2bc630da1349d5e1e2855f04a10aab834c574672b987db9d194c64d6fd6eccf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffb690167b6811ebffdcfe85c4c5bacac0fa0dfb4cc8565b54afe3d9fd8bb5f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:53:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:53:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffb690167b6811ebffdcfe85c4c5bacac0fa0dfb4cc8565b54afe3d9fd8bb5f1"} {"level":"info","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffb690167b6811ebffdcfe85c4c5bacac0fa0dfb4cc8565b54afe3d9fd8bb5f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2bc630da1349d5e1e2855f04a10aab834c574672b987db9d194c64d6fd6eccf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffb690167b6811ebffdcfe85c4c5bacac0fa0dfb4cc8565b54afe3d9fd8bb5f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:53:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:53:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffb690167b6811ebffdcfe85c4c5bacac0fa0dfb4cc8565b54afe3d9fd8bb5f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2bc630da1349d5e1e2855f04a10aab834c574672b987db9d194c64d6fd6eccf"} {"level":"info","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffb690167b6811ebffdcfe85c4c5bacac0fa0dfb4cc8565b54afe3d9fd8bb5f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2bc630da1349d5e1e2855f04a10aab834c574672b987db9d194c64d6fd6eccf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:53:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:53:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2bc630da1349d5e1e2855f04a10aab834c574672b987db9d194c64d6fd6eccf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffb690167b6811ebffdcfe85c4c5bacac0fa0dfb4cc8565b54afe3d9fd8bb5f1"} {"level":"info","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffb690167b6811ebffdcfe85c4c5bacac0fa0dfb4cc8565b54afe3d9fd8bb5f1"} {"level":"info","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2bc630da1349d5e1e2855f04a10aab834c574672b987db9d194c64d6fd6eccf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffb690167b6811ebffdcfe85c4c5bacac0fa0dfb4cc8565b54afe3d9fd8bb5f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2bc630da1349d5e1e2855f04a10aab834c574672b987db9d194c64d6fd6eccf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T16:53:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T16:53:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2bc630da1349d5e1e2855f04a10aab834c574672b987db9d194c64d6fd6eccf"} {"level":"info","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2bc630da1349d5e1e2855f04a10aab834c574672b987db9d194c64d6fd6eccf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2bc630da1349d5e1e2855f04a10aab834c574672b987db9d194c64d6fd6eccf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2bc630da1349d5e1e2855f04a10aab834c574672b987db9d194c64d6fd6eccf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2bc630da1349d5e1e2855f04a10aab834c574672b987db9d194c64d6fd6eccf"} {"level":"debug","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2bc630da1349d5e1e2855f04a10aab834c574672b987db9d194c64d6fd6eccf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T16:53:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T16:53:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2bc630da1349d5e1e2855f04a10aab834c574672b987db9d194c64d6fd6eccf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2bc630da1349d5e1e2855f04a10aab834c574672b987db9d194c64d6fd6eccf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2bc630da1349d5e1e2855f04a10aab834c574672b987db9d194c64d6fd6eccf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T16:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2bc630da1349d5e1e2855f04a10aab834c574672b987db9d194c64d6fd6eccf"} {"level":"info","ts":"2026-07-24T16:53:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"465a01c6-a42e-42f4-9b2f-b7eab4acaf98","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:59280","PortSpecifier":{"PortValue":59280}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.84:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"465a01c6-a42e-42f4-9b2f-b7eab4acaf98","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-b04709.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T16:53:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"465a01c6-a42e-42f4-9b2f-b7eab4acaf98","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:59280","PortSpecifier":{"PortValue":59280}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.84:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784912038,"nanos":389421033},"http":{"id":"465a01c6-a42e-42f4-9b2f-b7eab4acaf98","method":"POST","headers":{":authority":"e2e-ipp-a-b04709.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T16:53:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"465a01c6-a42e-42f4-9b2f-b7eab4acaf98","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T16:53:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"465a01c6-a42e-42f4-9b2f-b7eab4acaf98","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c6920799-9c3c-48b3-a3e6-1c1556efc9c4","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=515021ea-127d-4968-9b2f-4957a9e43ba5"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cf20df43e4ca"]}} {"level":"debug","ts":"2026-07-24T16:53:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"465a01c6-a42e-42f4-9b2f-b7eab4acaf98","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/cf20df43e4ca"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=515021ea-127d-4968-9b2f-4957a9e43ba5"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c6920799-9c3c-48b3-a3e6-1c1556efc9c4","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7dbfa15d6328c29f19024bbb93241b7a100c85449f8eb24889083eda19e139b9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.84:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-b04709.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T16:53:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"465a01c6-a42e-42f4-9b2f-b7eab4acaf98","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:53:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"465a01c6-a42e-42f4-9b2f-b7eab4acaf98","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:53:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"465a01c6-a42e-42f4-9b2f-b7eab4acaf98","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-b04709/ipp-route-b04709\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-b04709/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:53:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"465a01c6-a42e-42f4-9b2f-b7eab4acaf98","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T16:53:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"465a01c6-a42e-42f4-9b2f-b7eab4acaf98","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T16:53:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"465a01c6-a42e-42f4-9b2f-b7eab4acaf98","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T16:53:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"465a01c6-a42e-42f4-9b2f-b7eab4acaf98","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T16:53:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"465a01c6-a42e-42f4-9b2f-b7eab4acaf98","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T16:54:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d8ed244f-f1ea-4a7d-8141-d8c67e41fb14","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:59290","PortSpecifier":{"PortValue":59290}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.84:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d8ed244f-f1ea-4a7d-8141-d8c67e41fb14","method":"POST","path":"/ai-tenant-e2e-ipp-a-b04709/ipp-route-b04709/v1/chat/completions","host":"e2e-ipp-a-b04709.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T16:54:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d8ed244f-f1ea-4a7d-8141-d8c67e41fb14","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:59290","PortSpecifier":{"PortValue":59290}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.84:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784912040,"nanos":451576985},"http":{"id":"d8ed244f-f1ea-4a7d-8141-d8c67e41fb14","method":"POST","headers":{":authority":"e2e-ipp-a-b04709.apps.d7c425ee-cc4d-4dec-8bce-cf20df43e4ca.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-b04709/ipp-route-b04709/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T16:54:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d8ed244f-f1ea-4a7d-8141-d8c67e41fb14","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-gPS4jBubj12WGF7R_DDMc62vqTDmWFGlA3ums91a2KKXnKaE6dwvtXvM3IcV"} {"level":"debug","ts":"2026-07-24T16:54:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d8ed244f-f1ea-4a7d-8141-d8c67e41fb14","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-b04709.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-gPS4jBubj12WGF7R_DDMc62vqTDmWFGlA3ums91a2KKXnKaE6dwvtXvM3IcV\"}"} {"level":"debug","ts":"2026-07-24T16:54:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d8ed244f-f1ea-4a7d-8141-d8c67e41fb14","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-b04709.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5406e41f-71a1-4f6a-ac3e-acae15e89919","keyName":"e2e-ipp-b04709","subscription":"ipp-route-b04709-sub","tenant":"e2e-ipp-a-b04709","userId":"5406e41f-71a1-4f6a-ac3e-acae15e89919","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T16:54:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d8ed244f-f1ea-4a7d-8141-d8c67e41fb14","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-b04709.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-ipp-a-b04709/ipp-route-b04709\",\"requestedSubscription\":\"ipp-route-b04709-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T16:54:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d8ed244f-f1ea-4a7d-8141-d8c67e41fb14","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-b04709.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"ipp-route-b04709","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-b04709-sub","namespace":"ai-tenant-e2e-ipp-a-b04709","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-b04709/ipp-route-b04709"}} {"level":"debug","ts":"2026-07-24T16:54:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d8ed244f-f1ea-4a7d-8141-d8c67e41fb14","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T16:54:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d8ed244f-f1ea-4a7d-8141-d8c67e41fb14","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:54:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d8ed244f-f1ea-4a7d-8141-d8c67e41fb14","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-b04709/ipp-route-b04709\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-b04709/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:54:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d8ed244f-f1ea-4a7d-8141-d8c67e41fb14","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:54:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d8ed244f-f1ea-4a7d-8141-d8c67e41fb14","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T16:54:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d8ed244f-f1ea-4a7d-8141-d8c67e41fb14","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T16:54:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d8ed244f-f1ea-4a7d-8141-d8c67e41fb14","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-b04709-sub"} {"level":"debug","ts":"2026-07-24T16:54:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d8ed244f-f1ea-4a7d-8141-d8c67e41fb14","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T16:54:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d8ed244f-f1ea-4a7d-8141-d8c67e41fb14","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5406e41f-71a1-4f6a-ac3e-acae15e89919","keyName":"e2e-ipp-b04709","selected_subscription":"ipp-route-b04709-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-b04709/ipp-route-b04709-sub@ai-tenant-e2e-ipp-a-b04709/ipp-route-b04709","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"ipp-route-b04709","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-b04709-sub","namespace":"ai-tenant-e2e-ipp-a-b04709","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-b04709/ipp-route-b04709"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T16:54:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d8ed244f-f1ea-4a7d-8141-d8c67e41fb14","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T16:54:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d8ed244f-f1ea-4a7d-8141-d8c67e41fb14","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/518ab03c4c0e12642a4860ed405d3a5b3a002d5598ff130799e403850554abcc"} {"level":"info","ts":"2026-07-24T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e6fc20669ca76bedfc85658ba3e7938328b661a213c543a9f0918b9f6484e418"} {"level":"info","ts":"2026-07-24T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c26ae2bba021a2f951337f8fd7a27de62f2235afa79cec071cbaa4af3c8a0edc"} {"level":"info","ts":"2026-07-24T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ffb690167b6811ebffdcfe85c4c5bacac0fa0dfb4cc8565b54afe3d9fd8bb5f1"} {"level":"info","ts":"2026-07-24T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e2bc630da1349d5e1e2855f04a10aab834c574672b987db9d194c64d6fd6eccf"} {"level":"info","ts":"2026-07-24T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/81a97687f39fdca4c8ac65c43fdac043f478aa20bf8c8922544911ee0fcd99f5"} {"level":"info","ts":"2026-07-24T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f4bee34857d9b8dfeeeea559b46f7a502c987b75056e6b62f5121587f327be48"} {"level":"info","ts":"2026-07-24T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7dbfa15d6328c29f19024bbb93241b7a100c85449f8eb24889083eda19e139b9"} {"level":"info","ts":"2026-07-24T16:55:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/81699bb68175c724cc20eb0210bfe7122f7ab4b9354d04e1af381689fb7217a3"} {"level":"info","ts":"2026-07-24T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6878a7412574e3d81c52b1a688dbde2095d1a99eb538f3dd2a021f2e679bd2a9"} {"level":"info","ts":"2026-07-24T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/372c5f8b66f6479c418c4fee2fc269c6ca1561da24d9df5297ea1f6c50d4d4a9"} {"level":"info","ts":"2026-07-24T16:55:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1cca4b484a9dc5e3885d790f6b51798b532486b365b48127f4b24a1898cf227c"}