--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"debug","ts":"2026-07-29T18:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"587e310458cff93f9237139ba6cb2322e85b96a0d71c7eb33422b27efd8a89a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:40:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:40:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:40:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:40:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/587e310458cff93f9237139ba6cb2322e85b96a0d71c7eb33422b27efd8a89a3"} {"level":"error","ts":"2026-07-29T18:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-29T18:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"587e310458cff93f9237139ba6cb2322e85b96a0d71c7eb33422b27efd8a89a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:40:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:40:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["587e310458cff93f9237139ba6cb2322e85b96a0d71c7eb33422b27efd8a89a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"587e310458cff93f9237139ba6cb2322e85b96a0d71c7eb33422b27efd8a89a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:40:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:40:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143"} {"level":"info","ts":"2026-07-29T18:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"587e310458cff93f9237139ba6cb2322e85b96a0d71c7eb33422b27efd8a89a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:40:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:40:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"587e310458cff93f9237139ba6cb2322e85b96a0d71c7eb33422b27efd8a89a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:40:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:40:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/587e310458cff93f9237139ba6cb2322e85b96a0d71c7eb33422b27efd8a89a3"} {"level":"info","ts":"2026-07-29T18:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"934200f2b4c68ce42635ca9c3df3e2a41d5823d633a667b23f639b29df544c0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:40:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:40:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143"} {"level":"info","ts":"2026-07-29T18:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"934200f2b4c68ce42635ca9c3df3e2a41d5823d633a667b23f639b29df544c0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"587e310458cff93f9237139ba6cb2322e85b96a0d71c7eb33422b27efd8a89a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:40:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:40:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["587e310458cff93f9237139ba6cb2322e85b96a0d71c7eb33422b27efd8a89a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"587e310458cff93f9237139ba6cb2322e85b96a0d71c7eb33422b27efd8a89a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"934200f2b4c68ce42635ca9c3df3e2a41d5823d633a667b23f639b29df544c0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:40:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:40:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/934200f2b4c68ce42635ca9c3df3e2a41d5823d633a667b23f639b29df544c0e"} {"level":"info","ts":"2026-07-29T18:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"934200f2b4c68ce42635ca9c3df3e2a41d5823d633a667b23f639b29df544c0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"587e310458cff93f9237139ba6cb2322e85b96a0d71c7eb33422b27efd8a89a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:40:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:40:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"587e310458cff93f9237139ba6cb2322e85b96a0d71c7eb33422b27efd8a89a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"934200f2b4c68ce42635ca9c3df3e2a41d5823d633a667b23f639b29df544c0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:40:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:40:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["934200f2b4c68ce42635ca9c3df3e2a41d5823d633a667b23f639b29df544c0e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/587e310458cff93f9237139ba6cb2322e85b96a0d71c7eb33422b27efd8a89a3"} {"level":"info","ts":"2026-07-29T18:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"934200f2b4c68ce42635ca9c3df3e2a41d5823d633a667b23f639b29df544c0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"587e310458cff93f9237139ba6cb2322e85b96a0d71c7eb33422b27efd8a89a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:40:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:40:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["587e310458cff93f9237139ba6cb2322e85b96a0d71c7eb33422b27efd8a89a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143"} {"level":"info","ts":"2026-07-29T18:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"587e310458cff93f9237139ba6cb2322e85b96a0d71c7eb33422b27efd8a89a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"934200f2b4c68ce42635ca9c3df3e2a41d5823d633a667b23f639b29df544c0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:40:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:40:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"934200f2b4c68ce42635ca9c3df3e2a41d5823d633a667b23f639b29df544c0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"587e310458cff93f9237139ba6cb2322e85b96a0d71c7eb33422b27efd8a89a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"934200f2b4c68ce42635ca9c3df3e2a41d5823d633a667b23f639b29df544c0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"934200f2b4c68ce42635ca9c3df3e2a41d5823d633a667b23f639b29df544c0e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/934200f2b4c68ce42635ca9c3df3e2a41d5823d633a667b23f639b29df544c0e"} {"level":"debug","ts":"2026-07-29T18:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"934200f2b4c68ce42635ca9c3df3e2a41d5823d633a667b23f639b29df544c0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:40:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:40:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["934200f2b4c68ce42635ca9c3df3e2a41d5823d633a667b23f639b29df544c0e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/587e310458cff93f9237139ba6cb2322e85b96a0d71c7eb33422b27efd8a89a3"} {"level":"info","ts":"2026-07-29T18:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"934200f2b4c68ce42635ca9c3df3e2a41d5823d633a667b23f639b29df544c0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"934200f2b4c68ce42635ca9c3df3e2a41d5823d633a667b23f639b29df544c0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:40:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:40:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/934200f2b4c68ce42635ca9c3df3e2a41d5823d633a667b23f639b29df544c0e"} {"level":"info","ts":"2026-07-29T18:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"934200f2b4c68ce42635ca9c3df3e2a41d5823d633a667b23f639b29df544c0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"934200f2b4c68ce42635ca9c3df3e2a41d5823d633a667b23f639b29df544c0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"934200f2b4c68ce42635ca9c3df3e2a41d5823d633a667b23f639b29df544c0e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/934200f2b4c68ce42635ca9c3df3e2a41d5823d633a667b23f639b29df544c0e"} {"level":"debug","ts":"2026-07-29T18:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"934200f2b4c68ce42635ca9c3df3e2a41d5823d633a667b23f639b29df544c0e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:40:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/934200f2b4c68ce42635ca9c3df3e2a41d5823d633a667b23f639b29df544c0e"} {"level":"debug","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"934200f2b4c68ce42635ca9c3df3e2a41d5823d633a667b23f639b29df544c0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:40:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:40:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["934200f2b4c68ce42635ca9c3df3e2a41d5823d633a667b23f639b29df544c0e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"934200f2b4c68ce42635ca9c3df3e2a41d5823d633a667b23f639b29df544c0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"934200f2b4c68ce42635ca9c3df3e2a41d5823d633a667b23f639b29df544c0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:40:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:40:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"934200f2b4c68ce42635ca9c3df3e2a41d5823d633a667b23f639b29df544c0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"934200f2b4c68ce42635ca9c3df3e2a41d5823d633a667b23f639b29df544c0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"934200f2b4c68ce42635ca9c3df3e2a41d5823d633a667b23f639b29df544c0e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/934200f2b4c68ce42635ca9c3df3e2a41d5823d633a667b23f639b29df544c0e"} {"level":"debug","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"934200f2b4c68ce42635ca9c3df3e2a41d5823d633a667b23f639b29df544c0e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/934200f2b4c68ce42635ca9c3df3e2a41d5823d633a667b23f639b29df544c0e"} {"level":"debug","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"934200f2b4c68ce42635ca9c3df3e2a41d5823d633a667b23f639b29df544c0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:40:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:40:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["934200f2b4c68ce42635ca9c3df3e2a41d5823d633a667b23f639b29df544c0e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"934200f2b4c68ce42635ca9c3df3e2a41d5823d633a667b23f639b29df544c0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"934200f2b4c68ce42635ca9c3df3e2a41d5823d633a667b23f639b29df544c0e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/934200f2b4c68ce42635ca9c3df3e2a41d5823d633a667b23f639b29df544c0e"} {"level":"debug","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7917c29f12b01824cb9e894aedb318810880c38acffdbf5055ab7869f545c78e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:40:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:40:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7917c29f12b01824cb9e894aedb318810880c38acffdbf5055ab7869f545c78e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7917c29f12b01824cb9e894aedb318810880c38acffdbf5055ab7869f545c78e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7917c29f12b01824cb9e894aedb318810880c38acffdbf5055ab7869f545c78e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7917c29f12b01824cb9e894aedb318810880c38acffdbf5055ab7869f545c78e"} {"level":"debug","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7917c29f12b01824cb9e894aedb318810880c38acffdbf5055ab7869f545c78e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7917c29f12b01824cb9e894aedb318810880c38acffdbf5055ab7869f545c78e"} {"level":"debug","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7917c29f12b01824cb9e894aedb318810880c38acffdbf5055ab7869f545c78e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:40:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:40:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7917c29f12b01824cb9e894aedb318810880c38acffdbf5055ab7869f545c78e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7917c29f12b01824cb9e894aedb318810880c38acffdbf5055ab7869f545c78e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7917c29f12b01824cb9e894aedb318810880c38acffdbf5055ab7869f545c78e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:40:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:40:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7917c29f12b01824cb9e894aedb318810880c38acffdbf5055ab7869f545c78e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c568eea772bdb57e6bb6ca671ef5c2fe6e20f66b02cc37007fdff87b5a4d066","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:40:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:40:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7917c29f12b01824cb9e894aedb318810880c38acffdbf5055ab7869f545c78e"} {"level":"info","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c568eea772bdb57e6bb6ca671ef5c2fe6e20f66b02cc37007fdff87b5a4d066","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7917c29f12b01824cb9e894aedb318810880c38acffdbf5055ab7869f545c78e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:40:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:40:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7917c29f12b01824cb9e894aedb318810880c38acffdbf5055ab7869f545c78e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7917c29f12b01824cb9e894aedb318810880c38acffdbf5055ab7869f545c78e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c568eea772bdb57e6bb6ca671ef5c2fe6e20f66b02cc37007fdff87b5a4d066","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:40:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:40:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c568eea772bdb57e6bb6ca671ef5c2fe6e20f66b02cc37007fdff87b5a4d066"} {"level":"info","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c568eea772bdb57e6bb6ca671ef5c2fe6e20f66b02cc37007fdff87b5a4d066","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7917c29f12b01824cb9e894aedb318810880c38acffdbf5055ab7869f545c78e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:40:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:40:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7917c29f12b01824cb9e894aedb318810880c38acffdbf5055ab7869f545c78e"} {"level":"info","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7917c29f12b01824cb9e894aedb318810880c38acffdbf5055ab7869f545c78e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c568eea772bdb57e6bb6ca671ef5c2fe6e20f66b02cc37007fdff87b5a4d066","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7917c29f12b01824cb9e894aedb318810880c38acffdbf5055ab7869f545c78e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:40:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:40:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7917c29f12b01824cb9e894aedb318810880c38acffdbf5055ab7869f545c78e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c568eea772bdb57e6bb6ca671ef5c2fe6e20f66b02cc37007fdff87b5a4d066"} {"level":"info","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7917c29f12b01824cb9e894aedb318810880c38acffdbf5055ab7869f545c78e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7917c29f12b01824cb9e894aedb318810880c38acffdbf5055ab7869f545c78e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7917c29f12b01824cb9e894aedb318810880c38acffdbf5055ab7869f545c78e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:40:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:40:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7917c29f12b01824cb9e894aedb318810880c38acffdbf5055ab7869f545c78e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c568eea772bdb57e6bb6ca671ef5c2fe6e20f66b02cc37007fdff87b5a4d066","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:40:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:40:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c568eea772bdb57e6bb6ca671ef5c2fe6e20f66b02cc37007fdff87b5a4d066"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7917c29f12b01824cb9e894aedb318810880c38acffdbf5055ab7869f545c78e"} {"level":"info","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c568eea772bdb57e6bb6ca671ef5c2fe6e20f66b02cc37007fdff87b5a4d066","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7917c29f12b01824cb9e894aedb318810880c38acffdbf5055ab7869f545c78e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3292ef3fc5ba055c878e17adf8e88d4cc6f54b7493282a7faa151370ca4b9d34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:40:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:40:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7917c29f12b01824cb9e894aedb318810880c38acffdbf5055ab7869f545c78e"} {"level":"info","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3292ef3fc5ba055c878e17adf8e88d4cc6f54b7493282a7faa151370ca4b9d34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c568eea772bdb57e6bb6ca671ef5c2fe6e20f66b02cc37007fdff87b5a4d066","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e85b0b42f0cb91e45e8918363ae43bc4ee127aa2c5b7d916b37b7c98d9ff7c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:40:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:40:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e85b0b42f0cb91e45e8918363ae43bc4ee127aa2c5b7d916b37b7c98d9ff7c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3292ef3fc5ba055c878e17adf8e88d4cc6f54b7493282a7faa151370ca4b9d34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:40:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:40:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3292ef3fc5ba055c878e17adf8e88d4cc6f54b7493282a7faa151370ca4b9d34"} {"level":"info","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3292ef3fc5ba055c878e17adf8e88d4cc6f54b7493282a7faa151370ca4b9d34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7917c29f12b01824cb9e894aedb318810880c38acffdbf5055ab7869f545c78e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:40:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:40:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7917c29f12b01824cb9e894aedb318810880c38acffdbf5055ab7869f545c78e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c568eea772bdb57e6bb6ca671ef5c2fe6e20f66b02cc37007fdff87b5a4d066"} {"level":"info","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7917c29f12b01824cb9e894aedb318810880c38acffdbf5055ab7869f545c78e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0997124b3e283496d6ca5c9d6c1ba4646e7623cbb4fa40377616704b4ef6c04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:40:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:40:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e85b0b42f0cb91e45e8918363ae43bc4ee127aa2c5b7d916b37b7c98d9ff7c1"} {"level":"info","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0997124b3e283496d6ca5c9d6c1ba4646e7623cbb4fa40377616704b4ef6c04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e85b0b42f0cb91e45e8918363ae43bc4ee127aa2c5b7d916b37b7c98d9ff7c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:40:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:40:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e85b0b42f0cb91e45e8918363ae43bc4ee127aa2c5b7d916b37b7c98d9ff7c1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e85b0b42f0cb91e45e8918363ae43bc4ee127aa2c5b7d916b37b7c98d9ff7c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3292ef3fc5ba055c878e17adf8e88d4cc6f54b7493282a7faa151370ca4b9d34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:40:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:40:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3292ef3fc5ba055c878e17adf8e88d4cc6f54b7493282a7faa151370ca4b9d34"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0997124b3e283496d6ca5c9d6c1ba4646e7623cbb4fa40377616704b4ef6c04"} {"level":"info","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3292ef3fc5ba055c878e17adf8e88d4cc6f54b7493282a7faa151370ca4b9d34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7917c29f12b01824cb9e894aedb318810880c38acffdbf5055ab7869f545c78e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de1148cdc83c21f965a5c6e3ca14fc1090fa05506625cfc114de9e48c7f9fd53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:40:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:40:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3292ef3fc5ba055c878e17adf8e88d4cc6f54b7493282a7faa151370ca4b9d34"} {"level":"info","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de1148cdc83c21f965a5c6e3ca14fc1090fa05506625cfc114de9e48c7f9fd53","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0997124b3e283496d6ca5c9d6c1ba4646e7623cbb4fa40377616704b4ef6c04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:40:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:40:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0997124b3e283496d6ca5c9d6c1ba4646e7623cbb4fa40377616704b4ef6c04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7917c29f12b01824cb9e894aedb318810880c38acffdbf5055ab7869f545c78e"} {"level":"info","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0997124b3e283496d6ca5c9d6c1ba4646e7623cbb4fa40377616704b4ef6c04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfa90309c2fb8703bb7635f0ca7eafd61bfa1a76144d0a7fac80fea5e1ff5a93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:40:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:40:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfa90309c2fb8703bb7635f0ca7eafd61bfa1a76144d0a7fac80fea5e1ff5a93","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e85b0b42f0cb91e45e8918363ae43bc4ee127aa2c5b7d916b37b7c98d9ff7c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3292ef3fc5ba055c878e17adf8e88d4cc6f54b7493282a7faa151370ca4b9d34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de1148cdc83c21f965a5c6e3ca14fc1090fa05506625cfc114de9e48c7f9fd53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:40:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:40:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de1148cdc83c21f965a5c6e3ca14fc1090fa05506625cfc114de9e48c7f9fd53"} {"level":"info","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de1148cdc83c21f965a5c6e3ca14fc1090fa05506625cfc114de9e48c7f9fd53","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0997124b3e283496d6ca5c9d6c1ba4646e7623cbb4fa40377616704b4ef6c04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfa90309c2fb8703bb7635f0ca7eafd61bfa1a76144d0a7fac80fea5e1ff5a93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:40:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:40:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfa90309c2fb8703bb7635f0ca7eafd61bfa1a76144d0a7fac80fea5e1ff5a93"} {"level":"info","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfa90309c2fb8703bb7635f0ca7eafd61bfa1a76144d0a7fac80fea5e1ff5a93","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de1148cdc83c21f965a5c6e3ca14fc1090fa05506625cfc114de9e48c7f9fd53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:40:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:40:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de1148cdc83c21f965a5c6e3ca14fc1090fa05506625cfc114de9e48c7f9fd53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de1148cdc83c21f965a5c6e3ca14fc1090fa05506625cfc114de9e48c7f9fd53","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfa90309c2fb8703bb7635f0ca7eafd61bfa1a76144d0a7fac80fea5e1ff5a93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:40:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:40:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dfa90309c2fb8703bb7635f0ca7eafd61bfa1a76144d0a7fac80fea5e1ff5a93"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e85b0b42f0cb91e45e8918363ae43bc4ee127aa2c5b7d916b37b7c98d9ff7c1"} {"level":"info","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfa90309c2fb8703bb7635f0ca7eafd61bfa1a76144d0a7fac80fea5e1ff5a93","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de1148cdc83c21f965a5c6e3ca14fc1090fa05506625cfc114de9e48c7f9fd53","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfa90309c2fb8703bb7635f0ca7eafd61bfa1a76144d0a7fac80fea5e1ff5a93","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0997124b3e283496d6ca5c9d6c1ba4646e7623cbb4fa40377616704b4ef6c04"} {"level":"info","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3292ef3fc5ba055c878e17adf8e88d4cc6f54b7493282a7faa151370ca4b9d34"} {"level":"info","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de1148cdc83c21f965a5c6e3ca14fc1090fa05506625cfc114de9e48c7f9fd53"} {"level":"info","ts":"2026-07-29T18:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfa90309c2fb8703bb7635f0ca7eafd61bfa1a76144d0a7fac80fea5e1ff5a93"} {"level":"info","ts":"2026-07-29T18:40:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0380899b-b170-49a1-adb3-de9084fd87c2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:48912","PortSpecifier":{"PortValue":48912}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0380899b-b170-49a1-adb3-de9084fd87c2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-297c4d.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T18:40:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0380899b-b170-49a1-adb3-de9084fd87c2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:48912","PortSpecifier":{"PortValue":48912}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785350437,"nanos":115915513},"http":{"id":"0380899b-b170-49a1-adb3-de9084fd87c2","method":"POST","headers":{":authority":"e2e-shared-a-297c4d.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T18:40:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0380899b-b170-49a1-adb3-de9084fd87c2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-29T18:40:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0380899b-b170-49a1-adb3-de9084fd87c2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8e218b41-a126-4bf8-ae17-9a90356caab5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=178173f8-337c-4e3f-884b-fd9042aa046c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/31eca5b07dec"]}} {"level":"debug","ts":"2026-07-29T18:40:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0380899b-b170-49a1-adb3-de9084fd87c2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/31eca5b07dec"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=178173f8-337c-4e3f-884b-fd9042aa046c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8e218b41-a126-4bf8-ae17-9a90356caab5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0a729d64313292f1c304b109e5afed4706e80f40600b3f20aa6f2ee577f14c4e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-297c4d.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T18:40:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0380899b-b170-49a1-adb3-de9084fd87c2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:40:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0380899b-b170-49a1-adb3-de9084fd87c2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:40:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0380899b-b170-49a1-adb3-de9084fd87c2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-297c4d/auth-test-model-297c4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-297c4d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:40:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0380899b-b170-49a1-adb3-de9084fd87c2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-29T18:40:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0380899b-b170-49a1-adb3-de9084fd87c2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-29T18:40:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0380899b-b170-49a1-adb3-de9084fd87c2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-29T18:40:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0380899b-b170-49a1-adb3-de9084fd87c2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T18:40:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0380899b-b170-49a1-adb3-de9084fd87c2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T18:40:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"24cd72f9-11f5-4771-bd40-b24f5a984927","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:54986","PortSpecifier":{"PortValue":54986}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"24cd72f9-11f5-4771-bd40-b24f5a984927","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f9520e.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T18:40:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"24cd72f9-11f5-4771-bd40-b24f5a984927","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:54986","PortSpecifier":{"PortValue":54986}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785350437,"nanos":153600612},"http":{"id":"24cd72f9-11f5-4771-bd40-b24f5a984927","method":"POST","headers":{":authority":"e2e-shared-b-f9520e.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T18:40:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"24cd72f9-11f5-4771-bd40-b24f5a984927","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-29T18:40:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"24cd72f9-11f5-4771-bd40-b24f5a984927","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8e218b41-a126-4bf8-ae17-9a90356caab5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=178173f8-337c-4e3f-884b-fd9042aa046c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/31eca5b07dec"]}} {"level":"debug","ts":"2026-07-29T18:40:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"24cd72f9-11f5-4771-bd40-b24f5a984927","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/31eca5b07dec"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=178173f8-337c-4e3f-884b-fd9042aa046c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8e218b41-a126-4bf8-ae17-9a90356caab5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7917c29f12b01824cb9e894aedb318810880c38acffdbf5055ab7869f545c78e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f9520e.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T18:40:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24cd72f9-11f5-4771-bd40-b24f5a984927","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:40:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24cd72f9-11f5-4771-bd40-b24f5a984927","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:40:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24cd72f9-11f5-4771-bd40-b24f5a984927","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f9520e/auth-test-model-f9520e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f9520e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:40:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"24cd72f9-11f5-4771-bd40-b24f5a984927","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-29T18:40:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24cd72f9-11f5-4771-bd40-b24f5a984927","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T18:40:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24cd72f9-11f5-4771-bd40-b24f5a984927","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-29T18:40:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"24cd72f9-11f5-4771-bd40-b24f5a984927","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T18:40:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"24cd72f9-11f5-4771-bd40-b24f5a984927","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T18:40:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"755d057d-e097-46aa-b9e1-48d50329ef7a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:54998","PortSpecifier":{"PortValue":54998}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"755d057d-e097-46aa-b9e1-48d50329ef7a","method":"GET","path":"/maas-api/v1/api-keys/d23a10da-dd61-4ae3-a343-0c7f8b8a56a5","host":"e2e-shared-b-f9520e.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T18:40:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"755d057d-e097-46aa-b9e1-48d50329ef7a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:54998","PortSpecifier":{"PortValue":54998}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785350437,"nanos":194623890},"http":{"id":"755d057d-e097-46aa-b9e1-48d50329ef7a","method":"GET","headers":{":authority":"e2e-shared-b-f9520e.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/d23a10da-dd61-4ae3-a343-0c7f8b8a56a5",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T18:40:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"755d057d-e097-46aa-b9e1-48d50329ef7a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-29T18:40:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"755d057d-e097-46aa-b9e1-48d50329ef7a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8e218b41-a126-4bf8-ae17-9a90356caab5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=178173f8-337c-4e3f-884b-fd9042aa046c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/31eca5b07dec"]}} {"level":"debug","ts":"2026-07-29T18:40:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"755d057d-e097-46aa-b9e1-48d50329ef7a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/31eca5b07dec"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=178173f8-337c-4e3f-884b-fd9042aa046c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8e218b41-a126-4bf8-ae17-9a90356caab5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7917c29f12b01824cb9e894aedb318810880c38acffdbf5055ab7869f545c78e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f9520e.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/d23a10da-dd61-4ae3-a343-0c7f8b8a56a5",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T18:40:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"755d057d-e097-46aa-b9e1-48d50329ef7a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:40:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"755d057d-e097-46aa-b9e1-48d50329ef7a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:40:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"755d057d-e097-46aa-b9e1-48d50329ef7a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f9520e/auth-test-model-f9520e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f9520e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:40:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"755d057d-e097-46aa-b9e1-48d50329ef7a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-29T18:40:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"755d057d-e097-46aa-b9e1-48d50329ef7a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T18:40:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"755d057d-e097-46aa-b9e1-48d50329ef7a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-29T18:40:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"755d057d-e097-46aa-b9e1-48d50329ef7a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T18:40:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"755d057d-e097-46aa-b9e1-48d50329ef7a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T18:40:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4a87b7ed-7c46-4efc-9b6d-fbbc50b1062f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:48928","PortSpecifier":{"PortValue":48928}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4a87b7ed-7c46-4efc-9b6d-fbbc50b1062f","method":"GET","path":"/maas-api/v1/api-keys/d23a10da-dd61-4ae3-a343-0c7f8b8a56a5","host":"e2e-shared-a-297c4d.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T18:40:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4a87b7ed-7c46-4efc-9b6d-fbbc50b1062f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:48928","PortSpecifier":{"PortValue":48928}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785350437,"nanos":227852014},"http":{"id":"4a87b7ed-7c46-4efc-9b6d-fbbc50b1062f","method":"GET","headers":{":authority":"e2e-shared-a-297c4d.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/d23a10da-dd61-4ae3-a343-0c7f8b8a56a5",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T18:40:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4a87b7ed-7c46-4efc-9b6d-fbbc50b1062f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-29T18:40:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4a87b7ed-7c46-4efc-9b6d-fbbc50b1062f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8e218b41-a126-4bf8-ae17-9a90356caab5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=178173f8-337c-4e3f-884b-fd9042aa046c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/31eca5b07dec"]}} {"level":"debug","ts":"2026-07-29T18:40:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4a87b7ed-7c46-4efc-9b6d-fbbc50b1062f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/31eca5b07dec"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=178173f8-337c-4e3f-884b-fd9042aa046c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8e218b41-a126-4bf8-ae17-9a90356caab5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0a729d64313292f1c304b109e5afed4706e80f40600b3f20aa6f2ee577f14c4e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-297c4d.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/d23a10da-dd61-4ae3-a343-0c7f8b8a56a5",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T18:40:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a87b7ed-7c46-4efc-9b6d-fbbc50b1062f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:40:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a87b7ed-7c46-4efc-9b6d-fbbc50b1062f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:40:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a87b7ed-7c46-4efc-9b6d-fbbc50b1062f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-297c4d/auth-test-model-297c4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-297c4d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:40:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4a87b7ed-7c46-4efc-9b6d-fbbc50b1062f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-29T18:40:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a87b7ed-7c46-4efc-9b6d-fbbc50b1062f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T18:40:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a87b7ed-7c46-4efc-9b6d-fbbc50b1062f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-29T18:40:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4a87b7ed-7c46-4efc-9b6d-fbbc50b1062f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T18:40:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4a87b7ed-7c46-4efc-9b6d-fbbc50b1062f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T18:40:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3292ef3fc5ba055c878e17adf8e88d4cc6f54b7493282a7faa151370ca4b9d34"} {"level":"info","ts":"2026-07-29T18:40:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f0997124b3e283496d6ca5c9d6c1ba4646e7623cbb4fa40377616704b4ef6c04"} {"level":"info","ts":"2026-07-29T18:40:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5ab4aa17f93f59ea4602f735d1543aded8c4a0ec7fc4a5e65a82d7b5eb72f964"} {"level":"info","ts":"2026-07-29T18:40:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dfa90309c2fb8703bb7635f0ca7eafd61bfa1a76144d0a7fac80fea5e1ff5a93"} {"level":"info","ts":"2026-07-29T18:40:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4c568eea772bdb57e6bb6ca671ef5c2fe6e20f66b02cc37007fdff87b5a4d066"} {"level":"info","ts":"2026-07-29T18:40:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/587e310458cff93f9237139ba6cb2322e85b96a0d71c7eb33422b27efd8a89a3"} {"level":"info","ts":"2026-07-29T18:40:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/de1148cdc83c21f965a5c6e3ca14fc1090fa05506625cfc114de9e48c7f9fd53"} {"level":"info","ts":"2026-07-29T18:40:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ddbbebfc035d381ad9388bb313c463f0310658dacec3922cb0e4630f6cf7e499"} {"level":"info","ts":"2026-07-29T18:40:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7917c29f12b01824cb9e894aedb318810880c38acffdbf5055ab7869f545c78e"} {"level":"info","ts":"2026-07-29T18:40:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/934200f2b4c68ce42635ca9c3df3e2a41d5823d633a667b23f639b29df544c0e"} {"level":"info","ts":"2026-07-29T18:40:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7e85b0b42f0cb91e45e8918363ae43bc4ee127aa2c5b7d916b37b7c98d9ff7c1"} {"level":"info","ts":"2026-07-29T18:40:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143"} {"level":"debug","ts":"2026-07-29T18:40:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:40:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:40:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:40:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:40:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143"} {"level":"info","ts":"2026-07-29T18:40:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:40:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:40:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-29T18:40:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-29T18:40:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:40:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143"} {"level":"info","ts":"2026-07-29T18:40:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143"} {"level":"debug","ts":"2026-07-29T18:40:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:40:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:40:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:40:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143"} {"level":"debug","ts":"2026-07-29T18:40:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfa90309c2fb8703bb7635f0ca7eafd61bfa1a76144d0a7fac80fea5e1ff5a93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:40:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:40:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfa90309c2fb8703bb7635f0ca7eafd61bfa1a76144d0a7fac80fea5e1ff5a93","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfa90309c2fb8703bb7635f0ca7eafd61bfa1a76144d0a7fac80fea5e1ff5a93","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfa90309c2fb8703bb7635f0ca7eafd61bfa1a76144d0a7fac80fea5e1ff5a93","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:40:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfa90309c2fb8703bb7635f0ca7eafd61bfa1a76144d0a7fac80fea5e1ff5a93"} {"level":"debug","ts":"2026-07-29T18:40:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfa90309c2fb8703bb7635f0ca7eafd61bfa1a76144d0a7fac80fea5e1ff5a93","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:40:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfa90309c2fb8703bb7635f0ca7eafd61bfa1a76144d0a7fac80fea5e1ff5a93"} {"level":"debug","ts":"2026-07-29T18:40:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfa90309c2fb8703bb7635f0ca7eafd61bfa1a76144d0a7fac80fea5e1ff5a93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:40:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:40:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dfa90309c2fb8703bb7635f0ca7eafd61bfa1a76144d0a7fac80fea5e1ff5a93"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfa90309c2fb8703bb7635f0ca7eafd61bfa1a76144d0a7fac80fea5e1ff5a93","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfa90309c2fb8703bb7635f0ca7eafd61bfa1a76144d0a7fac80fea5e1ff5a93","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e85b0b42f0cb91e45e8918363ae43bc4ee127aa2c5b7d916b37b7c98d9ff7c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:40:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:40:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e85b0b42f0cb91e45e8918363ae43bc4ee127aa2c5b7d916b37b7c98d9ff7c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e85b0b42f0cb91e45e8918363ae43bc4ee127aa2c5b7d916b37b7c98d9ff7c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e85b0b42f0cb91e45e8918363ae43bc4ee127aa2c5b7d916b37b7c98d9ff7c1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:40:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfa90309c2fb8703bb7635f0ca7eafd61bfa1a76144d0a7fac80fea5e1ff5a93"} {"level":"debug","ts":"2026-07-29T18:40:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e85b0b42f0cb91e45e8918363ae43bc4ee127aa2c5b7d916b37b7c98d9ff7c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:40:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:40:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e85b0b42f0cb91e45e8918363ae43bc4ee127aa2c5b7d916b37b7c98d9ff7c1"} {"level":"info","ts":"2026-07-29T18:40:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e85b0b42f0cb91e45e8918363ae43bc4ee127aa2c5b7d916b37b7c98d9ff7c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e85b0b42f0cb91e45e8918363ae43bc4ee127aa2c5b7d916b37b7c98d9ff7c1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:40:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e85b0b42f0cb91e45e8918363ae43bc4ee127aa2c5b7d916b37b7c98d9ff7c1"} {"level":"debug","ts":"2026-07-29T18:40:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e85b0b42f0cb91e45e8918363ae43bc4ee127aa2c5b7d916b37b7c98d9ff7c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:40:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:40:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e85b0b42f0cb91e45e8918363ae43bc4ee127aa2c5b7d916b37b7c98d9ff7c1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e85b0b42f0cb91e45e8918363ae43bc4ee127aa2c5b7d916b37b7c98d9ff7c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e85b0b42f0cb91e45e8918363ae43bc4ee127aa2c5b7d916b37b7c98d9ff7c1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:40:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e85b0b42f0cb91e45e8918363ae43bc4ee127aa2c5b7d916b37b7c98d9ff7c1"} {"level":"debug","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c568eea772bdb57e6bb6ca671ef5c2fe6e20f66b02cc37007fdff87b5a4d066","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:40:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:40:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c568eea772bdb57e6bb6ca671ef5c2fe6e20f66b02cc37007fdff87b5a4d066","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c568eea772bdb57e6bb6ca671ef5c2fe6e20f66b02cc37007fdff87b5a4d066","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:40:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:40:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c568eea772bdb57e6bb6ca671ef5c2fe6e20f66b02cc37007fdff87b5a4d066"} {"level":"info","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c568eea772bdb57e6bb6ca671ef5c2fe6e20f66b02cc37007fdff87b5a4d066","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c568eea772bdb57e6bb6ca671ef5c2fe6e20f66b02cc37007fdff87b5a4d066","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:40:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:40:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4c568eea772bdb57e6bb6ca671ef5c2fe6e20f66b02cc37007fdff87b5a4d066","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4c568eea772bdb57e6bb6ca671ef5c2fe6e20f66b02cc37007fdff87b5a4d066\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c568eea772bdb57e6bb6ca671ef5c2fe6e20f66b02cc37007fdff87b5a4d066","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c568eea772bdb57e6bb6ca671ef5c2fe6e20f66b02cc37007fdff87b5a4d066","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c568eea772bdb57e6bb6ca671ef5c2fe6e20f66b02cc37007fdff87b5a4d066"} {"level":"info","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c568eea772bdb57e6bb6ca671ef5c2fe6e20f66b02cc37007fdff87b5a4d066"} {"level":"debug","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ab4aa17f93f59ea4602f735d1543aded8c4a0ec7fc4a5e65a82d7b5eb72f964","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:40:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:40:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ab4aa17f93f59ea4602f735d1543aded8c4a0ec7fc4a5e65a82d7b5eb72f964","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ab4aa17f93f59ea4602f735d1543aded8c4a0ec7fc4a5e65a82d7b5eb72f964","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ab4aa17f93f59ea4602f735d1543aded8c4a0ec7fc4a5e65a82d7b5eb72f964","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c568eea772bdb57e6bb6ca671ef5c2fe6e20f66b02cc37007fdff87b5a4d066","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:40:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:40:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c568eea772bdb57e6bb6ca671ef5c2fe6e20f66b02cc37007fdff87b5a4d066"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ab4aa17f93f59ea4602f735d1543aded8c4a0ec7fc4a5e65a82d7b5eb72f964"} {"level":"info","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c568eea772bdb57e6bb6ca671ef5c2fe6e20f66b02cc37007fdff87b5a4d066","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c568eea772bdb57e6bb6ca671ef5c2fe6e20f66b02cc37007fdff87b5a4d066","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ab4aa17f93f59ea4602f735d1543aded8c4a0ec7fc4a5e65a82d7b5eb72f964","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ab4aa17f93f59ea4602f735d1543aded8c4a0ec7fc4a5e65a82d7b5eb72f964"} {"level":"info","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c568eea772bdb57e6bb6ca671ef5c2fe6e20f66b02cc37007fdff87b5a4d066"} {"level":"debug","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ab4aa17f93f59ea4602f735d1543aded8c4a0ec7fc4a5e65a82d7b5eb72f964","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:40:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:40:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ab4aa17f93f59ea4602f735d1543aded8c4a0ec7fc4a5e65a82d7b5eb72f964"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ab4aa17f93f59ea4602f735d1543aded8c4a0ec7fc4a5e65a82d7b5eb72f964","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ab4aa17f93f59ea4602f735d1543aded8c4a0ec7fc4a5e65a82d7b5eb72f964","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:40:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:40:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ab4aa17f93f59ea4602f735d1543aded8c4a0ec7fc4a5e65a82d7b5eb72f964"} {"level":"info","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ab4aa17f93f59ea4602f735d1543aded8c4a0ec7fc4a5e65a82d7b5eb72f964","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddbbebfc035d381ad9388bb313c463f0310658dacec3922cb0e4630f6cf7e499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:40:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:40:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddbbebfc035d381ad9388bb313c463f0310658dacec3922cb0e4630f6cf7e499"} {"level":"info","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddbbebfc035d381ad9388bb313c463f0310658dacec3922cb0e4630f6cf7e499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ab4aa17f93f59ea4602f735d1543aded8c4a0ec7fc4a5e65a82d7b5eb72f964","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3292ef3fc5ba055c878e17adf8e88d4cc6f54b7493282a7faa151370ca4b9d34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:40:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:40:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ab4aa17f93f59ea4602f735d1543aded8c4a0ec7fc4a5e65a82d7b5eb72f964"} {"level":"info","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3292ef3fc5ba055c878e17adf8e88d4cc6f54b7493282a7faa151370ca4b9d34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddbbebfc035d381ad9388bb313c463f0310658dacec3922cb0e4630f6cf7e499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:40:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:40:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ddbbebfc035d381ad9388bb313c463f0310658dacec3922cb0e4630f6cf7e499"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3292ef3fc5ba055c878e17adf8e88d4cc6f54b7493282a7faa151370ca4b9d34"} {"level":"info","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddbbebfc035d381ad9388bb313c463f0310658dacec3922cb0e4630f6cf7e499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ab4aa17f93f59ea4602f735d1543aded8c4a0ec7fc4a5e65a82d7b5eb72f964","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:40:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:40:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ab4aa17f93f59ea4602f735d1543aded8c4a0ec7fc4a5e65a82d7b5eb72f964"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddbbebfc035d381ad9388bb313c463f0310658dacec3922cb0e4630f6cf7e499"} {"level":"info","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3292ef3fc5ba055c878e17adf8e88d4cc6f54b7493282a7faa151370ca4b9d34"} {"level":"info","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ab4aa17f93f59ea4602f735d1543aded8c4a0ec7fc4a5e65a82d7b5eb72f964","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3292ef3fc5ba055c878e17adf8e88d4cc6f54b7493282a7faa151370ca4b9d34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:40:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:40:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3292ef3fc5ba055c878e17adf8e88d4cc6f54b7493282a7faa151370ca4b9d34"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddbbebfc035d381ad9388bb313c463f0310658dacec3922cb0e4630f6cf7e499"} {"level":"info","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3292ef3fc5ba055c878e17adf8e88d4cc6f54b7493282a7faa151370ca4b9d34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddbbebfc035d381ad9388bb313c463f0310658dacec3922cb0e4630f6cf7e499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7917c29f12b01824cb9e894aedb318810880c38acffdbf5055ab7869f545c78e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:40:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:40:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7917c29f12b01824cb9e894aedb318810880c38acffdbf5055ab7869f545c78e"} {"level":"info","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7917c29f12b01824cb9e894aedb318810880c38acffdbf5055ab7869f545c78e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ab4aa17f93f59ea4602f735d1543aded8c4a0ec7fc4a5e65a82d7b5eb72f964","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:40:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:40:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ab4aa17f93f59ea4602f735d1543aded8c4a0ec7fc4a5e65a82d7b5eb72f964","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3292ef3fc5ba055c878e17adf8e88d4cc6f54b7493282a7faa151370ca4b9d34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7917c29f12b01824cb9e894aedb318810880c38acffdbf5055ab7869f545c78e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:40:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:40:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7917c29f12b01824cb9e894aedb318810880c38acffdbf5055ab7869f545c78e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ab4aa17f93f59ea4602f735d1543aded8c4a0ec7fc4a5e65a82d7b5eb72f964"} {"level":"info","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7917c29f12b01824cb9e894aedb318810880c38acffdbf5055ab7869f545c78e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ab4aa17f93f59ea4602f735d1543aded8c4a0ec7fc4a5e65a82d7b5eb72f964","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:40:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:40:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ab4aa17f93f59ea4602f735d1543aded8c4a0ec7fc4a5e65a82d7b5eb72f964"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3292ef3fc5ba055c878e17adf8e88d4cc6f54b7493282a7faa151370ca4b9d34"} {"level":"info","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ab4aa17f93f59ea4602f735d1543aded8c4a0ec7fc4a5e65a82d7b5eb72f964","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7917c29f12b01824cb9e894aedb318810880c38acffdbf5055ab7869f545c78e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:40:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:40:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7917c29f12b01824cb9e894aedb318810880c38acffdbf5055ab7869f545c78e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ab4aa17f93f59ea4602f735d1543aded8c4a0ec7fc4a5e65a82d7b5eb72f964","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de1148cdc83c21f965a5c6e3ca14fc1090fa05506625cfc114de9e48c7f9fd53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:40:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:40:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7917c29f12b01824cb9e894aedb318810880c38acffdbf5055ab7869f545c78e"} {"level":"info","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de1148cdc83c21f965a5c6e3ca14fc1090fa05506625cfc114de9e48c7f9fd53","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7917c29f12b01824cb9e894aedb318810880c38acffdbf5055ab7869f545c78e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:40:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:40:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7917c29f12b01824cb9e894aedb318810880c38acffdbf5055ab7869f545c78e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ab4aa17f93f59ea4602f735d1543aded8c4a0ec7fc4a5e65a82d7b5eb72f964"} {"level":"info","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7917c29f12b01824cb9e894aedb318810880c38acffdbf5055ab7869f545c78e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de1148cdc83c21f965a5c6e3ca14fc1090fa05506625cfc114de9e48c7f9fd53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:40:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:40:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de1148cdc83c21f965a5c6e3ca14fc1090fa05506625cfc114de9e48c7f9fd53","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7917c29f12b01824cb9e894aedb318810880c38acffdbf5055ab7869f545c78e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de1148cdc83c21f965a5c6e3ca14fc1090fa05506625cfc114de9e48c7f9fd53","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de1148cdc83c21f965a5c6e3ca14fc1090fa05506625cfc114de9e48c7f9fd53"} {"level":"debug","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de1148cdc83c21f965a5c6e3ca14fc1090fa05506625cfc114de9e48c7f9fd53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:40:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:40:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de1148cdc83c21f965a5c6e3ca14fc1090fa05506625cfc114de9e48c7f9fd53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de1148cdc83c21f965a5c6e3ca14fc1090fa05506625cfc114de9e48c7f9fd53","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de1148cdc83c21f965a5c6e3ca14fc1090fa05506625cfc114de9e48c7f9fd53","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7917c29f12b01824cb9e894aedb318810880c38acffdbf5055ab7869f545c78e"} {"level":"debug","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"587e310458cff93f9237139ba6cb2322e85b96a0d71c7eb33422b27efd8a89a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:40:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:40:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de1148cdc83c21f965a5c6e3ca14fc1090fa05506625cfc114de9e48c7f9fd53"} {"level":"info","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"587e310458cff93f9237139ba6cb2322e85b96a0d71c7eb33422b27efd8a89a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"587e310458cff93f9237139ba6cb2322e85b96a0d71c7eb33422b27efd8a89a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:40:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:40:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"587e310458cff93f9237139ba6cb2322e85b96a0d71c7eb33422b27efd8a89a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"934200f2b4c68ce42635ca9c3df3e2a41d5823d633a667b23f639b29df544c0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:40:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:40:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"934200f2b4c68ce42635ca9c3df3e2a41d5823d633a667b23f639b29df544c0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"587e310458cff93f9237139ba6cb2322e85b96a0d71c7eb33422b27efd8a89a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"934200f2b4c68ce42635ca9c3df3e2a41d5823d633a667b23f639b29df544c0e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/587e310458cff93f9237139ba6cb2322e85b96a0d71c7eb33422b27efd8a89a3"} {"level":"debug","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"934200f2b4c68ce42635ca9c3df3e2a41d5823d633a667b23f639b29df544c0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:40:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:40:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"934200f2b4c68ce42635ca9c3df3e2a41d5823d633a667b23f639b29df544c0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"587e310458cff93f9237139ba6cb2322e85b96a0d71c7eb33422b27efd8a89a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:40:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:40:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["587e310458cff93f9237139ba6cb2322e85b96a0d71c7eb33422b27efd8a89a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/934200f2b4c68ce42635ca9c3df3e2a41d5823d633a667b23f639b29df544c0e"} {"level":"info","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"587e310458cff93f9237139ba6cb2322e85b96a0d71c7eb33422b27efd8a89a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"934200f2b4c68ce42635ca9c3df3e2a41d5823d633a667b23f639b29df544c0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:40:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:40:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["934200f2b4c68ce42635ca9c3df3e2a41d5823d633a667b23f639b29df544c0e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"934200f2b4c68ce42635ca9c3df3e2a41d5823d633a667b23f639b29df544c0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"587e310458cff93f9237139ba6cb2322e85b96a0d71c7eb33422b27efd8a89a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:40:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:40:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"587e310458cff93f9237139ba6cb2322e85b96a0d71c7eb33422b27efd8a89a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0997124b3e283496d6ca5c9d6c1ba4646e7623cbb4fa40377616704b4ef6c04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:40:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:40:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/587e310458cff93f9237139ba6cb2322e85b96a0d71c7eb33422b27efd8a89a3"} {"level":"info","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0997124b3e283496d6ca5c9d6c1ba4646e7623cbb4fa40377616704b4ef6c04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"934200f2b4c68ce42635ca9c3df3e2a41d5823d633a667b23f639b29df544c0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:40:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:40:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"934200f2b4c68ce42635ca9c3df3e2a41d5823d633a667b23f639b29df544c0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"587e310458cff93f9237139ba6cb2322e85b96a0d71c7eb33422b27efd8a89a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:40:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:40:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["587e310458cff93f9237139ba6cb2322e85b96a0d71c7eb33422b27efd8a89a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"587e310458cff93f9237139ba6cb2322e85b96a0d71c7eb33422b27efd8a89a3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0997124b3e283496d6ca5c9d6c1ba4646e7623cbb4fa40377616704b4ef6c04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"934200f2b4c68ce42635ca9c3df3e2a41d5823d633a667b23f639b29df544c0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"587e310458cff93f9237139ba6cb2322e85b96a0d71c7eb33422b27efd8a89a3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/934200f2b4c68ce42635ca9c3df3e2a41d5823d633a667b23f639b29df544c0e"} {"level":"debug","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0997124b3e283496d6ca5c9d6c1ba4646e7623cbb4fa40377616704b4ef6c04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:40:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:40:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0997124b3e283496d6ca5c9d6c1ba4646e7623cbb4fa40377616704b4ef6c04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"934200f2b4c68ce42635ca9c3df3e2a41d5823d633a667b23f639b29df544c0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:40:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:40:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["934200f2b4c68ce42635ca9c3df3e2a41d5823d633a667b23f639b29df544c0e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0997124b3e283496d6ca5c9d6c1ba4646e7623cbb4fa40377616704b4ef6c04"} {"level":"info","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"934200f2b4c68ce42635ca9c3df3e2a41d5823d633a667b23f639b29df544c0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0997124b3e283496d6ca5c9d6c1ba4646e7623cbb4fa40377616704b4ef6c04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:40:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:40:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0997124b3e283496d6ca5c9d6c1ba4646e7623cbb4fa40377616704b4ef6c04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0997124b3e283496d6ca5c9d6c1ba4646e7623cbb4fa40377616704b4ef6c04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"934200f2b4c68ce42635ca9c3df3e2a41d5823d633a667b23f639b29df544c0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0997124b3e283496d6ca5c9d6c1ba4646e7623cbb4fa40377616704b4ef6c04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:40:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:40:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0997124b3e283496d6ca5c9d6c1ba4646e7623cbb4fa40377616704b4ef6c04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/587e310458cff93f9237139ba6cb2322e85b96a0d71c7eb33422b27efd8a89a3"} {"level":"error","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f0997124b3e283496d6ca5c9d6c1ba4646e7623cbb4fa40377616704b4ef6c04","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f0997124b3e283496d6ca5c9d6c1ba4646e7623cbb4fa40377616704b4ef6c04\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0997124b3e283496d6ca5c9d6c1ba4646e7623cbb4fa40377616704b4ef6c04","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0997124b3e283496d6ca5c9d6c1ba4646e7623cbb4fa40377616704b4ef6c04","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/934200f2b4c68ce42635ca9c3df3e2a41d5823d633a667b23f639b29df544c0e"} {"level":"info","ts":"2026-07-29T18:40:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0997124b3e283496d6ca5c9d6c1ba4646e7623cbb4fa40377616704b4ef6c04"} {"level":"info","ts":"2026-07-29T18:41:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dd764ba5-569d-460d-ba06-96d5770234c2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:38194","PortSpecifier":{"PortValue":38194}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dd764ba5-569d-460d-ba06-96d5770234c2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-297c4d.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T18:41:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dd764ba5-569d-460d-ba06-96d5770234c2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:38194","PortSpecifier":{"PortValue":38194}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785350480,"nanos":76669267},"http":{"id":"dd764ba5-569d-460d-ba06-96d5770234c2","method":"POST","headers":{":authority":"e2e-shared-a-297c4d.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T18:41:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"dd764ba5-569d-460d-ba06-96d5770234c2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-29T18:41:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dd764ba5-569d-460d-ba06-96d5770234c2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8e218b41-a126-4bf8-ae17-9a90356caab5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=178173f8-337c-4e3f-884b-fd9042aa046c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/31eca5b07dec"]}} {"level":"debug","ts":"2026-07-29T18:41:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dd764ba5-569d-460d-ba06-96d5770234c2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/31eca5b07dec"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=178173f8-337c-4e3f-884b-fd9042aa046c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8e218b41-a126-4bf8-ae17-9a90356caab5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0a729d64313292f1c304b109e5afed4706e80f40600b3f20aa6f2ee577f14c4e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-297c4d.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T18:41:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd764ba5-569d-460d-ba06-96d5770234c2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:41:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd764ba5-569d-460d-ba06-96d5770234c2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:41:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd764ba5-569d-460d-ba06-96d5770234c2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-297c4d/auth-test-model-297c4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-297c4d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:41:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dd764ba5-569d-460d-ba06-96d5770234c2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-29T18:41:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd764ba5-569d-460d-ba06-96d5770234c2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T18:41:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd764ba5-569d-460d-ba06-96d5770234c2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-29T18:41:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dd764ba5-569d-460d-ba06-96d5770234c2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T18:41:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dd764ba5-569d-460d-ba06-96d5770234c2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T18:41:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d7992ab-e552-4100-a9bb-54d1a1a2ef78","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51238","PortSpecifier":{"PortValue":51238}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3d7992ab-e552-4100-a9bb-54d1a1a2ef78","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f9520e.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T18:41:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d7992ab-e552-4100-a9bb-54d1a1a2ef78","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51238","PortSpecifier":{"PortValue":51238}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785350480,"nanos":111063267},"http":{"id":"3d7992ab-e552-4100-a9bb-54d1a1a2ef78","method":"POST","headers":{":authority":"e2e-shared-b-f9520e.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T18:41:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3d7992ab-e552-4100-a9bb-54d1a1a2ef78","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-29T18:41:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3d7992ab-e552-4100-a9bb-54d1a1a2ef78","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8e218b41-a126-4bf8-ae17-9a90356caab5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=178173f8-337c-4e3f-884b-fd9042aa046c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/31eca5b07dec"]}} {"level":"debug","ts":"2026-07-29T18:41:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3d7992ab-e552-4100-a9bb-54d1a1a2ef78","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/31eca5b07dec"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=178173f8-337c-4e3f-884b-fd9042aa046c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8e218b41-a126-4bf8-ae17-9a90356caab5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7917c29f12b01824cb9e894aedb318810880c38acffdbf5055ab7869f545c78e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f9520e.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T18:41:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d7992ab-e552-4100-a9bb-54d1a1a2ef78","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:41:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d7992ab-e552-4100-a9bb-54d1a1a2ef78","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:41:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d7992ab-e552-4100-a9bb-54d1a1a2ef78","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f9520e/auth-test-model-f9520e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f9520e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:41:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3d7992ab-e552-4100-a9bb-54d1a1a2ef78","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-29T18:41:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d7992ab-e552-4100-a9bb-54d1a1a2ef78","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-29T18:41:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d7992ab-e552-4100-a9bb-54d1a1a2ef78","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-29T18:41:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d7992ab-e552-4100-a9bb-54d1a1a2ef78","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T18:41:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d7992ab-e552-4100-a9bb-54d1a1a2ef78","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T18:41:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"39d8fedb-67e4-44fa-a7a4-d9657dfc858f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:38200","PortSpecifier":{"PortValue":38200}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"39d8fedb-67e4-44fa-a7a4-d9657dfc858f","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-297c4d.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T18:41:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"39d8fedb-67e4-44fa-a7a4-d9657dfc858f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:38200","PortSpecifier":{"PortValue":38200}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785350480,"nanos":149187876},"http":{"id":"39d8fedb-67e4-44fa-a7a4-d9657dfc858f","method":"POST","headers":{":authority":"e2e-shared-a-297c4d.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T18:41:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"39d8fedb-67e4-44fa-a7a4-d9657dfc858f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-XNsd4GrG2smaN3uX_bHNSPfWkiM1VaJzN8LNVZUR2zDcjl8UwW6GCxi2UiBB"} {"level":"debug","ts":"2026-07-29T18:41:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"39d8fedb-67e4-44fa-a7a4-d9657dfc858f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-297c4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-XNsd4GrG2smaN3uX_bHNSPfWkiM1VaJzN8LNVZUR2zDcjl8UwW6GCxi2UiBB\"}"} {"level":"debug","ts":"2026-07-29T18:41:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"39d8fedb-67e4-44fa-a7a4-d9657dfc858f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-297c4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"671f3e5d-5c9e-4997-a849-96f9c8a57183","keyName":"e2e-auth-iso-a-0ab076","subscription":"e2e-auth-iso-8df1ab","tenant":"e2e-shared-a-297c4d","userId":"671f3e5d-5c9e-4997-a849-96f9c8a57183","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-29T18:41:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"39d8fedb-67e4-44fa-a7a4-d9657dfc858f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T18:41:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39d8fedb-67e4-44fa-a7a4-d9657dfc858f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:41:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39d8fedb-67e4-44fa-a7a4-d9657dfc858f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:41:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39d8fedb-67e4-44fa-a7a4-d9657dfc858f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-297c4d/auth-test-model-297c4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-297c4d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:41:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39d8fedb-67e4-44fa-a7a4-d9657dfc858f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T18:41:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"39d8fedb-67e4-44fa-a7a4-d9657dfc858f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-29T18:41:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39d8fedb-67e4-44fa-a7a4-d9657dfc858f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-29T18:41:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39d8fedb-67e4-44fa-a7a4-d9657dfc858f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-8df1ab"} {"level":"info","ts":"2026-07-29T18:41:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"39d8fedb-67e4-44fa-a7a4-d9657dfc858f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T18:41:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"39d8fedb-67e4-44fa-a7a4-d9657dfc858f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T18:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3292ef3fc5ba055c878e17adf8e88d4cc6f54b7493282a7faa151370ca4b9d34"} {"level":"info","ts":"2026-07-29T18:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5ab4aa17f93f59ea4602f735d1543aded8c4a0ec7fc4a5e65a82d7b5eb72f964"} {"level":"info","ts":"2026-07-29T18:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/21ba5bac51df8ff953c661d298aae6c4628b36759c1ad6993ef2b991e8463b3f"} {"level":"info","ts":"2026-07-29T18:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0a729d64313292f1c304b109e5afed4706e80f40600b3f20aa6f2ee577f14c4e"} {"level":"info","ts":"2026-07-29T18:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0034667abf642b71465e84cfd09db34c943badf8e1f133b4598880c4f84ce010"} {"level":"info","ts":"2026-07-29T18:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7917c29f12b01824cb9e894aedb318810880c38acffdbf5055ab7869f545c78e"} {"level":"info","ts":"2026-07-29T18:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/934200f2b4c68ce42635ca9c3df3e2a41d5823d633a667b23f639b29df544c0e"} {"level":"info","ts":"2026-07-29T18:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f0997124b3e283496d6ca5c9d6c1ba4646e7623cbb4fa40377616704b4ef6c04"} {"level":"info","ts":"2026-07-29T18:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e470b5fae12e77cf02112d1c6136f733954662adda7813ef4943426488066160"} {"level":"info","ts":"2026-07-29T18:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5d670d27162abd64dfc9993910083807e82befb299ea2cadd2dfb09a8b9f82e7"} {"level":"info","ts":"2026-07-29T18:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172"} {"level":"info","ts":"2026-07-29T18:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dfa90309c2fb8703bb7635f0ca7eafd61bfa1a76144d0a7fac80fea5e1ff5a93"} {"level":"info","ts":"2026-07-29T18:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1d206f92e02eed11dea6f96d42947ff9ea8c4d976a9d81ab85a31ceeb8c995ab"} {"level":"info","ts":"2026-07-29T18:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143"} {"level":"info","ts":"2026-07-29T18:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ddbbebfc035d381ad9388bb313c463f0310658dacec3922cb0e4630f6cf7e499"} {"level":"info","ts":"2026-07-29T18:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ae2f5e63be2ad0f2e2d09aedd0aad70f9359e8c7a945c5e07a5318e0079f8503"} {"level":"info","ts":"2026-07-29T18:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4c568eea772bdb57e6bb6ca671ef5c2fe6e20f66b02cc37007fdff87b5a4d066"} {"level":"info","ts":"2026-07-29T18:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7e85b0b42f0cb91e45e8918363ae43bc4ee127aa2c5b7d916b37b7c98d9ff7c1"} {"level":"info","ts":"2026-07-29T18:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b6660728bb64f970a8a2423377cfa88a1926d4d86c26f9d7c02262d0188a0251"} {"level":"info","ts":"2026-07-29T18:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/de1148cdc83c21f965a5c6e3ca14fc1090fa05506625cfc114de9e48c7f9fd53"} {"level":"info","ts":"2026-07-29T18:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/587e310458cff93f9237139ba6cb2322e85b96a0d71c7eb33422b27efd8a89a3"} {"level":"info","ts":"2026-07-29T18:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a3e484e85254cce39859a180a7aaf05fa0df2358dfe0f6dbcbe47297e5b70c38"} {"level":"info","ts":"2026-07-29T18:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0f545e3ca1fa17139a149f2b64d745c040de12ceb7c06715db720d9c5f7900db"} {"level":"info","ts":"2026-07-29T18:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7f7fc6edd98f1de31785d39ec32936ee8b983fe275e99cb61eb2f9826a3add78"} {"level":"debug","ts":"2026-07-29T18:42:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:42:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:42:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:42:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:42:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:42:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:42:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143"} {"level":"info","ts":"2026-07-29T18:42:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:42:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:42:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-29T18:42:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-29T18:42:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:42:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143"} {"level":"info","ts":"2026-07-29T18:42:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143"} {"level":"debug","ts":"2026-07-29T18:42:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:42:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:42:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:42:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:42:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:42:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:42:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:42:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143"} {"level":"debug","ts":"2026-07-29T18:42:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:42:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143"} {"level":"debug","ts":"2026-07-29T18:42:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1fdbcbe5525393b447d1b3dab6abab64e8b19d5d26e9b93887b5029b803d0c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:42:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:42:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:42:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1fdbcbe5525393b447d1b3dab6abab64e8b19d5d26e9b93887b5029b803d0c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1fdbcbe5525393b447d1b3dab6abab64e8b19d5d26e9b93887b5029b803d0c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:42:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:42:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:42:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1fdbcbe5525393b447d1b3dab6abab64e8b19d5d26e9b93887b5029b803d0c8"} {"level":"info","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1fdbcbe5525393b447d1b3dab6abab64e8b19d5d26e9b93887b5029b803d0c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1fdbcbe5525393b447d1b3dab6abab64e8b19d5d26e9b93887b5029b803d0c8"} {"level":"debug","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1fdbcbe5525393b447d1b3dab6abab64e8b19d5d26e9b93887b5029b803d0c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:42:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:42:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1fdbcbe5525393b447d1b3dab6abab64e8b19d5d26e9b93887b5029b803d0c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143"} {"level":"info","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1fdbcbe5525393b447d1b3dab6abab64e8b19d5d26e9b93887b5029b803d0c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1fdbcbe5525393b447d1b3dab6abab64e8b19d5d26e9b93887b5029b803d0c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:42:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:42:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1fdbcbe5525393b447d1b3dab6abab64e8b19d5d26e9b93887b5029b803d0c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1fdbcbe5525393b447d1b3dab6abab64e8b19d5d26e9b93887b5029b803d0c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1fdbcbe5525393b447d1b3dab6abab64e8b19d5d26e9b93887b5029b803d0c8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1fdbcbe5525393b447d1b3dab6abab64e8b19d5d26e9b93887b5029b803d0c8"} {"level":"debug","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a24b802ca6c9e58058249a550b2d1e10ef1c73c6eadceac59391a513e63d56d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:42:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:42:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1fdbcbe5525393b447d1b3dab6abab64e8b19d5d26e9b93887b5029b803d0c8"} {"level":"info","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a24b802ca6c9e58058249a550b2d1e10ef1c73c6eadceac59391a513e63d56d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1fdbcbe5525393b447d1b3dab6abab64e8b19d5d26e9b93887b5029b803d0c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:42:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:42:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1fdbcbe5525393b447d1b3dab6abab64e8b19d5d26e9b93887b5029b803d0c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1fdbcbe5525393b447d1b3dab6abab64e8b19d5d26e9b93887b5029b803d0c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a24b802ca6c9e58058249a550b2d1e10ef1c73c6eadceac59391a513e63d56d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:42:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:42:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a24b802ca6c9e58058249a550b2d1e10ef1c73c6eadceac59391a513e63d56d4"} {"level":"info","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a24b802ca6c9e58058249a550b2d1e10ef1c73c6eadceac59391a513e63d56d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1fdbcbe5525393b447d1b3dab6abab64e8b19d5d26e9b93887b5029b803d0c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:42:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:42:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1fdbcbe5525393b447d1b3dab6abab64e8b19d5d26e9b93887b5029b803d0c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a24b802ca6c9e58058249a550b2d1e10ef1c73c6eadceac59391a513e63d56d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:42:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:42:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a24b802ca6c9e58058249a550b2d1e10ef1c73c6eadceac59391a513e63d56d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1fdbcbe5525393b447d1b3dab6abab64e8b19d5d26e9b93887b5029b803d0c8"} {"level":"info","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a24b802ca6c9e58058249a550b2d1e10ef1c73c6eadceac59391a513e63d56d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1fdbcbe5525393b447d1b3dab6abab64e8b19d5d26e9b93887b5029b803d0c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:42:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:42:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1fdbcbe5525393b447d1b3dab6abab64e8b19d5d26e9b93887b5029b803d0c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a24b802ca6c9e58058249a550b2d1e10ef1c73c6eadceac59391a513e63d56d4"} {"level":"info","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1fdbcbe5525393b447d1b3dab6abab64e8b19d5d26e9b93887b5029b803d0c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a24b802ca6c9e58058249a550b2d1e10ef1c73c6eadceac59391a513e63d56d4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1fdbcbe5525393b447d1b3dab6abab64e8b19d5d26e9b93887b5029b803d0c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:42:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:42:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1fdbcbe5525393b447d1b3dab6abab64e8b19d5d26e9b93887b5029b803d0c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1fdbcbe5525393b447d1b3dab6abab64e8b19d5d26e9b93887b5029b803d0c8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1fdbcbe5525393b447d1b3dab6abab64e8b19d5d26e9b93887b5029b803d0c8"} {"level":"debug","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1fdbcbe5525393b447d1b3dab6abab64e8b19d5d26e9b93887b5029b803d0c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:42:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:42:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1fdbcbe5525393b447d1b3dab6abab64e8b19d5d26e9b93887b5029b803d0c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1fdbcbe5525393b447d1b3dab6abab64e8b19d5d26e9b93887b5029b803d0c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1fdbcbe5525393b447d1b3dab6abab64e8b19d5d26e9b93887b5029b803d0c8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a24b802ca6c9e58058249a550b2d1e10ef1c73c6eadceac59391a513e63d56d4"} {"level":"info","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1fdbcbe5525393b447d1b3dab6abab64e8b19d5d26e9b93887b5029b803d0c8"} {"level":"debug","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ac98c826e55628eb41a7c171f28f747018300dec7080383e949ebdbff83ac42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:42:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:42:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ac98c826e55628eb41a7c171f28f747018300dec7080383e949ebdbff83ac42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ac98c826e55628eb41a7c171f28f747018300dec7080383e949ebdbff83ac42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ac98c826e55628eb41a7c171f28f747018300dec7080383e949ebdbff83ac42","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ac98c826e55628eb41a7c171f28f747018300dec7080383e949ebdbff83ac42"} {"level":"debug","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ac98c826e55628eb41a7c171f28f747018300dec7080383e949ebdbff83ac42","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ac98c826e55628eb41a7c171f28f747018300dec7080383e949ebdbff83ac42"} {"level":"debug","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ac98c826e55628eb41a7c171f28f747018300dec7080383e949ebdbff83ac42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:42:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:42:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ac98c826e55628eb41a7c171f28f747018300dec7080383e949ebdbff83ac42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ac98c826e55628eb41a7c171f28f747018300dec7080383e949ebdbff83ac42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ac98c826e55628eb41a7c171f28f747018300dec7080383e949ebdbff83ac42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:42:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:42:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ac98c826e55628eb41a7c171f28f747018300dec7080383e949ebdbff83ac42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:42:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:42:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ac98c826e55628eb41a7c171f28f747018300dec7080383e949ebdbff83ac42"} {"level":"info","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ac98c826e55628eb41a7c171f28f747018300dec7080383e949ebdbff83ac42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:42:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:42:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ac98c826e55628eb41a7c171f28f747018300dec7080383e949ebdbff83ac42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ac98c826e55628eb41a7c171f28f747018300dec7080383e949ebdbff83ac42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:42:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:42:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172"} {"level":"info","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ac98c826e55628eb41a7c171f28f747018300dec7080383e949ebdbff83ac42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:42:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:42:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ac98c826e55628eb41a7c171f28f747018300dec7080383e949ebdbff83ac42"} {"level":"info","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ac98c826e55628eb41a7c171f28f747018300dec7080383e949ebdbff83ac42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ac98c826e55628eb41a7c171f28f747018300dec7080383e949ebdbff83ac42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:42:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:42:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ac98c826e55628eb41a7c171f28f747018300dec7080383e949ebdbff83ac42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ac98c826e55628eb41a7c171f28f747018300dec7080383e949ebdbff83ac42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ac98c826e55628eb41a7c171f28f747018300dec7080383e949ebdbff83ac42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:42:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:42:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ac98c826e55628eb41a7c171f28f747018300dec7080383e949ebdbff83ac42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172"} {"level":"error","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4ac98c826e55628eb41a7c171f28f747018300dec7080383e949ebdbff83ac42","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4ac98c826e55628eb41a7c171f28f747018300dec7080383e949ebdbff83ac42\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:42:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:42:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ac98c826e55628eb41a7c171f28f747018300dec7080383e949ebdbff83ac42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:42:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:42:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ac98c826e55628eb41a7c171f28f747018300dec7080383e949ebdbff83ac42"} {"level":"info","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ac98c826e55628eb41a7c171f28f747018300dec7080383e949ebdbff83ac42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:42:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:42:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172"} {"level":"info","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ac98c826e55628eb41a7c171f28f747018300dec7080383e949ebdbff83ac42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:42:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:42:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:42:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:42:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ac98c826e55628eb41a7c171f28f747018300dec7080383e949ebdbff83ac42"} {"level":"error","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ac98c826e55628eb41a7c171f28f747018300dec7080383e949ebdbff83ac42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:42:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:42:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ac98c826e55628eb41a7c171f28f747018300dec7080383e949ebdbff83ac42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ac98c826e55628eb41a7c171f28f747018300dec7080383e949ebdbff83ac42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:42:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:42:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172"} {"level":"info","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ac98c826e55628eb41a7c171f28f747018300dec7080383e949ebdbff83ac42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:42:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:42:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ac98c826e55628eb41a7c171f28f747018300dec7080383e949ebdbff83ac42","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ac98c826e55628eb41a7c171f28f747018300dec7080383e949ebdbff83ac42"} {"level":"debug","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ac98c826e55628eb41a7c171f28f747018300dec7080383e949ebdbff83ac42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:42:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:42:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ac98c826e55628eb41a7c171f28f747018300dec7080383e949ebdbff83ac42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ac98c826e55628eb41a7c171f28f747018300dec7080383e949ebdbff83ac42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ac98c826e55628eb41a7c171f28f747018300dec7080383e949ebdbff83ac42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:42:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:42:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ac98c826e55628eb41a7c171f28f747018300dec7080383e949ebdbff83ac42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4ac98c826e55628eb41a7c171f28f747018300dec7080383e949ebdbff83ac42","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4ac98c826e55628eb41a7c171f28f747018300dec7080383e949ebdbff83ac42\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21ba5bac51df8ff953c661d298aae6c4628b36759c1ad6993ef2b991e8463b3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:42:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:42:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172"} {"level":"info","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21ba5bac51df8ff953c661d298aae6c4628b36759c1ad6993ef2b991e8463b3f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:42:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:42:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ac98c826e55628eb41a7c171f28f747018300dec7080383e949ebdbff83ac42"} {"level":"info","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ac98c826e55628eb41a7c171f28f747018300dec7080383e949ebdbff83ac42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21ba5bac51df8ff953c661d298aae6c4628b36759c1ad6993ef2b991e8463b3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:42:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:42:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21ba5bac51df8ff953c661d298aae6c4628b36759c1ad6993ef2b991e8463b3f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21ba5bac51df8ff953c661d298aae6c4628b36759c1ad6993ef2b991e8463b3f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21ba5bac51df8ff953c661d298aae6c4628b36759c1ad6993ef2b991e8463b3f"} {"level":"debug","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21ba5bac51df8ff953c661d298aae6c4628b36759c1ad6993ef2b991e8463b3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:42:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:42:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21ba5bac51df8ff953c661d298aae6c4628b36759c1ad6993ef2b991e8463b3f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21ba5bac51df8ff953c661d298aae6c4628b36759c1ad6993ef2b991e8463b3f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21ba5bac51df8ff953c661d298aae6c4628b36759c1ad6993ef2b991e8463b3f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172"} {"level":"info","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21ba5bac51df8ff953c661d298aae6c4628b36759c1ad6993ef2b991e8463b3f"} {"level":"debug","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a729d64313292f1c304b109e5afed4706e80f40600b3f20aa6f2ee577f14c4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:42:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:42:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a729d64313292f1c304b109e5afed4706e80f40600b3f20aa6f2ee577f14c4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a729d64313292f1c304b109e5afed4706e80f40600b3f20aa6f2ee577f14c4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a729d64313292f1c304b109e5afed4706e80f40600b3f20aa6f2ee577f14c4e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a729d64313292f1c304b109e5afed4706e80f40600b3f20aa6f2ee577f14c4e"} {"level":"debug","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a729d64313292f1c304b109e5afed4706e80f40600b3f20aa6f2ee577f14c4e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a729d64313292f1c304b109e5afed4706e80f40600b3f20aa6f2ee577f14c4e"} {"level":"debug","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a729d64313292f1c304b109e5afed4706e80f40600b3f20aa6f2ee577f14c4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:42:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:42:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a729d64313292f1c304b109e5afed4706e80f40600b3f20aa6f2ee577f14c4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a729d64313292f1c304b109e5afed4706e80f40600b3f20aa6f2ee577f14c4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a729d64313292f1c304b109e5afed4706e80f40600b3f20aa6f2ee577f14c4e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a729d64313292f1c304b109e5afed4706e80f40600b3f20aa6f2ee577f14c4e"} {"level":"debug","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde9b48b44f6c93aad6ce66cb7a4b719c01030afc17736f1b44a0b9347f1654c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:42:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:42:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde9b48b44f6c93aad6ce66cb7a4b719c01030afc17736f1b44a0b9347f1654c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde9b48b44f6c93aad6ce66cb7a4b719c01030afc17736f1b44a0b9347f1654c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:42:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:42:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde9b48b44f6c93aad6ce66cb7a4b719c01030afc17736f1b44a0b9347f1654c"} {"level":"info","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde9b48b44f6c93aad6ce66cb7a4b719c01030afc17736f1b44a0b9347f1654c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde9b48b44f6c93aad6ce66cb7a4b719c01030afc17736f1b44a0b9347f1654c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:42:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:42:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cde9b48b44f6c93aad6ce66cb7a4b719c01030afc17736f1b44a0b9347f1654c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cde9b48b44f6c93aad6ce66cb7a4b719c01030afc17736f1b44a0b9347f1654c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cde9b48b44f6c93aad6ce66cb7a4b719c01030afc17736f1b44a0b9347f1654c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cde9b48b44f6c93aad6ce66cb7a4b719c01030afc17736f1b44a0b9347f1654c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde9b48b44f6c93aad6ce66cb7a4b719c01030afc17736f1b44a0b9347f1654c"} {"level":"info","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde9b48b44f6c93aad6ce66cb7a4b719c01030afc17736f1b44a0b9347f1654c"} {"level":"debug","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d137042dc490409f38fcf2ec400abd802b891d10c0866c356d0715f2a39922bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:42:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:42:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d137042dc490409f38fcf2ec400abd802b891d10c0866c356d0715f2a39922bf"} {"level":"info","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d137042dc490409f38fcf2ec400abd802b891d10c0866c356d0715f2a39922bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde9b48b44f6c93aad6ce66cb7a4b719c01030afc17736f1b44a0b9347f1654c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:42:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:42:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cde9b48b44f6c93aad6ce66cb7a4b719c01030afc17736f1b44a0b9347f1654c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e2276825f749518988136133d83e5f02b3bac5fee60e1aeb3b4b6157348f29e"} {"level":"info","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde9b48b44f6c93aad6ce66cb7a4b719c01030afc17736f1b44a0b9347f1654c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e2276825f749518988136133d83e5f02b3bac5fee60e1aeb3b4b6157348f29e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:42:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:42:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e2276825f749518988136133d83e5f02b3bac5fee60e1aeb3b4b6157348f29e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d137042dc490409f38fcf2ec400abd802b891d10c0866c356d0715f2a39922bf"} {"level":"info","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e2276825f749518988136133d83e5f02b3bac5fee60e1aeb3b4b6157348f29e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d137042dc490409f38fcf2ec400abd802b891d10c0866c356d0715f2a39922bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:42:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:42:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d137042dc490409f38fcf2ec400abd802b891d10c0866c356d0715f2a39922bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de1148cdc83c21f965a5c6e3ca14fc1090fa05506625cfc114de9e48c7f9fd53"} {"level":"info","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d137042dc490409f38fcf2ec400abd802b891d10c0866c356d0715f2a39922bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de1148cdc83c21f965a5c6e3ca14fc1090fa05506625cfc114de9e48c7f9fd53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:42:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:42:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de1148cdc83c21f965a5c6e3ca14fc1090fa05506625cfc114de9e48c7f9fd53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde9b48b44f6c93aad6ce66cb7a4b719c01030afc17736f1b44a0b9347f1654c"} {"level":"info","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de1148cdc83c21f965a5c6e3ca14fc1090fa05506625cfc114de9e48c7f9fd53","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cde9b48b44f6c93aad6ce66cb7a4b719c01030afc17736f1b44a0b9347f1654c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4790b1b25298e14009979ec179a61df068352233f5724db54a8b40b0cd0f39d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:42:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:42:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4790b1b25298e14009979ec179a61df068352233f5724db54a8b40b0cd0f39d8"} {"level":"info","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4790b1b25298e14009979ec179a61df068352233f5724db54a8b40b0cd0f39d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e2276825f749518988136133d83e5f02b3bac5fee60e1aeb3b4b6157348f29e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:42:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:42:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e2276825f749518988136133d83e5f02b3bac5fee60e1aeb3b4b6157348f29e"} {"level":"info","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e2276825f749518988136133d83e5f02b3bac5fee60e1aeb3b4b6157348f29e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7917c29f12b01824cb9e894aedb318810880c38acffdbf5055ab7869f545c78e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:42:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:42:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7917c29f12b01824cb9e894aedb318810880c38acffdbf5055ab7869f545c78e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d137042dc490409f38fcf2ec400abd802b891d10c0866c356d0715f2a39922bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f545e3ca1fa17139a149f2b64d745c040de12ceb7c06715db720d9c5f7900db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:42:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:42:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7917c29f12b01824cb9e894aedb318810880c38acffdbf5055ab7869f545c78e"} {"level":"info","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f545e3ca1fa17139a149f2b64d745c040de12ceb7c06715db720d9c5f7900db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de1148cdc83c21f965a5c6e3ca14fc1090fa05506625cfc114de9e48c7f9fd53","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbedb7b2fcdfc63971b03634f6d2f89ee2eb79069a2cb314b010fbd7e58b0918","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:42:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:42:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d137042dc490409f38fcf2ec400abd802b891d10c0866c356d0715f2a39922bf"} {"level":"info","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbedb7b2fcdfc63971b03634f6d2f89ee2eb79069a2cb314b010fbd7e58b0918","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4790b1b25298e14009979ec179a61df068352233f5724db54a8b40b0cd0f39d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:42:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:42:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4790b1b25298e14009979ec179a61df068352233f5724db54a8b40b0cd0f39d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4790b1b25298e14009979ec179a61df068352233f5724db54a8b40b0cd0f39d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae0f5bdd908cf44fc78659a75a7205328eff5a66558388b43e56d60e496ac6a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:42:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:42:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f545e3ca1fa17139a149f2b64d745c040de12ceb7c06715db720d9c5f7900db"} {"level":"info","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae0f5bdd908cf44fc78659a75a7205328eff5a66558388b43e56d60e496ac6a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e2276825f749518988136133d83e5f02b3bac5fee60e1aeb3b4b6157348f29e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:42:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:42:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e2276825f749518988136133d83e5f02b3bac5fee60e1aeb3b4b6157348f29e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de1148cdc83c21f965a5c6e3ca14fc1090fa05506625cfc114de9e48c7f9fd53"} {"level":"info","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e2276825f749518988136133d83e5f02b3bac5fee60e1aeb3b4b6157348f29e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7917c29f12b01824cb9e894aedb318810880c38acffdbf5055ab7869f545c78e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:42:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:42:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7917c29f12b01824cb9e894aedb318810880c38acffdbf5055ab7869f545c78e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7917c29f12b01824cb9e894aedb318810880c38acffdbf5055ab7869f545c78e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e15fcb107aeebb625fd1fa7460efb48b88d593b710c4b85961763fa84ac117f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:42:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:42:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbedb7b2fcdfc63971b03634f6d2f89ee2eb79069a2cb314b010fbd7e58b0918"} {"level":"info","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e15fcb107aeebb625fd1fa7460efb48b88d593b710c4b85961763fa84ac117f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f545e3ca1fa17139a149f2b64d745c040de12ceb7c06715db720d9c5f7900db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:42:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:42:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f545e3ca1fa17139a149f2b64d745c040de12ceb7c06715db720d9c5f7900db"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f545e3ca1fa17139a149f2b64d745c040de12ceb7c06715db720d9c5f7900db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c568eea772bdb57e6bb6ca671ef5c2fe6e20f66b02cc37007fdff87b5a4d066","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:42:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:42:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4790b1b25298e14009979ec179a61df068352233f5724db54a8b40b0cd0f39d8"} {"level":"info","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c568eea772bdb57e6bb6ca671ef5c2fe6e20f66b02cc37007fdff87b5a4d066","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbedb7b2fcdfc63971b03634f6d2f89ee2eb79069a2cb314b010fbd7e58b0918","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:42:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:42:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cbedb7b2fcdfc63971b03634f6d2f89ee2eb79069a2cb314b010fbd7e58b0918"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae0f5bdd908cf44fc78659a75a7205328eff5a66558388b43e56d60e496ac6a5"} {"level":"info","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e2276825f749518988136133d83e5f02b3bac5fee60e1aeb3b4b6157348f29e"} {"level":"info","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7917c29f12b01824cb9e894aedb318810880c38acffdbf5055ab7869f545c78e"} {"level":"info","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbedb7b2fcdfc63971b03634f6d2f89ee2eb79069a2cb314b010fbd7e58b0918","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"facd6cc1c169775d93366a01293a49979c0dacf5c158d6186f41d5f9dc3b3e9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:42:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:42:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e15fcb107aeebb625fd1fa7460efb48b88d593b710c4b85961763fa84ac117f"} {"level":"info","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c568eea772bdb57e6bb6ca671ef5c2fe6e20f66b02cc37007fdff87b5a4d066"} {"level":"info","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"facd6cc1c169775d93366a01293a49979c0dacf5c158d6186f41d5f9dc3b3e9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4790b1b25298e14009979ec179a61df068352233f5724db54a8b40b0cd0f39d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d0dbb9a32e7171e82ffcf8627b957ebd85601b46acc773a839287bce2bb133f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:42:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:42:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/facd6cc1c169775d93366a01293a49979c0dacf5c158d6186f41d5f9dc3b3e9e"} {"level":"info","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d0dbb9a32e7171e82ffcf8627b957ebd85601b46acc773a839287bce2bb133f"} {"level":"info","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f545e3ca1fa17139a149f2b64d745c040de12ceb7c06715db720d9c5f7900db"} {"level":"info","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d0dbb9a32e7171e82ffcf8627b957ebd85601b46acc773a839287bce2bb133f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae0f5bdd908cf44fc78659a75a7205328eff5a66558388b43e56d60e496ac6a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:42:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:42:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae0f5bdd908cf44fc78659a75a7205328eff5a66558388b43e56d60e496ac6a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63b4c19daa8f9d07ec256101bccd00e4eb5c11db903937bd88097deaf5bb7289"} {"level":"info","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45542b4e4b5aa0dab68cf69f2e8613e5af068bb9fe67e923ff66a0c94cd3cd6d"} {"level":"info","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0a86143e4058b6e66042116acb6c96f37dc4207eeb130e463d62c86cb3b3aa1"} {"level":"info","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae0f5bdd908cf44fc78659a75a7205328eff5a66558388b43e56d60e496ac6a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e2276825f749518988136133d83e5f02b3bac5fee60e1aeb3b4b6157348f29e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7917c29f12b01824cb9e894aedb318810880c38acffdbf5055ab7869f545c78e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e15fcb107aeebb625fd1fa7460efb48b88d593b710c4b85961763fa84ac117f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:42:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:42:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e15fcb107aeebb625fd1fa7460efb48b88d593b710c4b85961763fa84ac117f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05b6efdc84f6d6089789d913573f40f7ef0be1920888d077f09a41a4cb30f2d3"} {"level":"info","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbedb7b2fcdfc63971b03634f6d2f89ee2eb79069a2cb314b010fbd7e58b0918"} {"level":"info","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e15fcb107aeebb625fd1fa7460efb48b88d593b710c4b85961763fa84ac117f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f545e3ca1fa17139a149f2b64d745c040de12ceb7c06715db720d9c5f7900db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63b4c19daa8f9d07ec256101bccd00e4eb5c11db903937bd88097deaf5bb7289","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:42:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:42:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63b4c19daa8f9d07ec256101bccd00e4eb5c11db903937bd88097deaf5bb7289"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/facd6cc1c169775d93366a01293a49979c0dacf5c158d6186f41d5f9dc3b3e9e"} {"level":"info","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d0dbb9a32e7171e82ffcf8627b957ebd85601b46acc773a839287bce2bb133f"} {"level":"info","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae0f5bdd908cf44fc78659a75a7205328eff5a66558388b43e56d60e496ac6a5"} {"level":"info","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63b4c19daa8f9d07ec256101bccd00e4eb5c11db903937bd88097deaf5bb7289","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45542b4e4b5aa0dab68cf69f2e8613e5af068bb9fe67e923ff66a0c94cd3cd6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:42:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:42:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["45542b4e4b5aa0dab68cf69f2e8613e5af068bb9fe67e923ff66a0c94cd3cd6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e15fcb107aeebb625fd1fa7460efb48b88d593b710c4b85961763fa84ac117f"} {"level":"info","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63b4c19daa8f9d07ec256101bccd00e4eb5c11db903937bd88097deaf5bb7289"} {"level":"info","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45542b4e4b5aa0dab68cf69f2e8613e5af068bb9fe67e923ff66a0c94cd3cd6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c568eea772bdb57e6bb6ca671ef5c2fe6e20f66b02cc37007fdff87b5a4d066","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:42:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:42:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c568eea772bdb57e6bb6ca671ef5c2fe6e20f66b02cc37007fdff87b5a4d066"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45542b4e4b5aa0dab68cf69f2e8613e5af068bb9fe67e923ff66a0c94cd3cd6d"} {"level":"info","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c568eea772bdb57e6bb6ca671ef5c2fe6e20f66b02cc37007fdff87b5a4d066","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0a86143e4058b6e66042116acb6c96f37dc4207eeb130e463d62c86cb3b3aa1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:42:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:42:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0a86143e4058b6e66042116acb6c96f37dc4207eeb130e463d62c86cb3b3aa1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c568eea772bdb57e6bb6ca671ef5c2fe6e20f66b02cc37007fdff87b5a4d066"} {"level":"info","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0a86143e4058b6e66042116acb6c96f37dc4207eeb130e463d62c86cb3b3aa1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05b6efdc84f6d6089789d913573f40f7ef0be1920888d077f09a41a4cb30f2d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:42:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:42:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["05b6efdc84f6d6089789d913573f40f7ef0be1920888d077f09a41a4cb30f2d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05b6efdc84f6d6089789d913573f40f7ef0be1920888d077f09a41a4cb30f2d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0a86143e4058b6e66042116acb6c96f37dc4207eeb130e463d62c86cb3b3aa1"} {"level":"debug","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbedb7b2fcdfc63971b03634f6d2f89ee2eb79069a2cb314b010fbd7e58b0918","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"facd6cc1c169775d93366a01293a49979c0dacf5c158d6186f41d5f9dc3b3e9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:42:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:42:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["facd6cc1c169775d93366a01293a49979c0dacf5c158d6186f41d5f9dc3b3e9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05b6efdc84f6d6089789d913573f40f7ef0be1920888d077f09a41a4cb30f2d3"} {"level":"info","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"facd6cc1c169775d93366a01293a49979c0dacf5c158d6186f41d5f9dc3b3e9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d0dbb9a32e7171e82ffcf8627b957ebd85601b46acc773a839287bce2bb133f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:42:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:42:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d0dbb9a32e7171e82ffcf8627b957ebd85601b46acc773a839287bce2bb133f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/facd6cc1c169775d93366a01293a49979c0dacf5c158d6186f41d5f9dc3b3e9e"} {"level":"info","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d0dbb9a32e7171e82ffcf8627b957ebd85601b46acc773a839287bce2bb133f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae0f5bdd908cf44fc78659a75a7205328eff5a66558388b43e56d60e496ac6a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e15fcb107aeebb625fd1fa7460efb48b88d593b710c4b85961763fa84ac117f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63b4c19daa8f9d07ec256101bccd00e4eb5c11db903937bd88097deaf5bb7289","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45542b4e4b5aa0dab68cf69f2e8613e5af068bb9fe67e923ff66a0c94cd3cd6d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c568eea772bdb57e6bb6ca671ef5c2fe6e20f66b02cc37007fdff87b5a4d066","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0a86143e4058b6e66042116acb6c96f37dc4207eeb130e463d62c86cb3b3aa1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05b6efdc84f6d6089789d913573f40f7ef0be1920888d077f09a41a4cb30f2d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"facd6cc1c169775d93366a01293a49979c0dacf5c158d6186f41d5f9dc3b3e9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d0dbb9a32e7171e82ffcf8627b957ebd85601b46acc773a839287bce2bb133f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:42:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:42:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d0dbb9a32e7171e82ffcf8627b957ebd85601b46acc773a839287bce2bb133f"} {"level":"info","ts":"2026-07-29T18:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d0dbb9a32e7171e82ffcf8627b957ebd85601b46acc773a839287bce2bb133f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d0dbb9a32e7171e82ffcf8627b957ebd85601b46acc773a839287bce2bb133f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:42:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:42:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d0dbb9a32e7171e82ffcf8627b957ebd85601b46acc773a839287bce2bb133f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d0dbb9a32e7171e82ffcf8627b957ebd85601b46acc773a839287bce2bb133f"} {"level":"info","ts":"2026-07-29T18:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d0dbb9a32e7171e82ffcf8627b957ebd85601b46acc773a839287bce2bb133f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d0dbb9a32e7171e82ffcf8627b957ebd85601b46acc773a839287bce2bb133f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:42:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:42:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d0dbb9a32e7171e82ffcf8627b957ebd85601b46acc773a839287bce2bb133f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d0dbb9a32e7171e82ffcf8627b957ebd85601b46acc773a839287bce2bb133f"} {"level":"error","ts":"2026-07-29T18:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5d0dbb9a32e7171e82ffcf8627b957ebd85601b46acc773a839287bce2bb133f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5d0dbb9a32e7171e82ffcf8627b957ebd85601b46acc773a839287bce2bb133f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-29T18:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d0dbb9a32e7171e82ffcf8627b957ebd85601b46acc773a839287bce2bb133f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d0dbb9a32e7171e82ffcf8627b957ebd85601b46acc773a839287bce2bb133f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:43:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5202ef7e-e9e4-4ac6-80a0-6526737421f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:48802","PortSpecifier":{"PortValue":48802}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5202ef7e-e9e4-4ac6-80a0-6526737421f8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-297c4d.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T18:43:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5202ef7e-e9e4-4ac6-80a0-6526737421f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:48802","PortSpecifier":{"PortValue":48802}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785350582,"nanos":200536026},"http":{"id":"5202ef7e-e9e4-4ac6-80a0-6526737421f8","method":"POST","headers":{":authority":"e2e-shared-a-297c4d.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T18:43:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5202ef7e-e9e4-4ac6-80a0-6526737421f8","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-29T18:43:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5202ef7e-e9e4-4ac6-80a0-6526737421f8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8e218b41-a126-4bf8-ae17-9a90356caab5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=178173f8-337c-4e3f-884b-fd9042aa046c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/31eca5b07dec"]}} {"level":"debug","ts":"2026-07-29T18:43:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5202ef7e-e9e4-4ac6-80a0-6526737421f8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/31eca5b07dec"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=178173f8-337c-4e3f-884b-fd9042aa046c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8e218b41-a126-4bf8-ae17-9a90356caab5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0a729d64313292f1c304b109e5afed4706e80f40600b3f20aa6f2ee577f14c4e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-297c4d.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T18:43:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5202ef7e-e9e4-4ac6-80a0-6526737421f8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:43:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5202ef7e-e9e4-4ac6-80a0-6526737421f8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:43:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5202ef7e-e9e4-4ac6-80a0-6526737421f8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-297c4d/sub-test-model-297c4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-297c4d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:43:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5202ef7e-e9e4-4ac6-80a0-6526737421f8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-29T18:43:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5202ef7e-e9e4-4ac6-80a0-6526737421f8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-29T18:43:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5202ef7e-e9e4-4ac6-80a0-6526737421f8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-29T18:43:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5202ef7e-e9e4-4ac6-80a0-6526737421f8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T18:43:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5202ef7e-e9e4-4ac6-80a0-6526737421f8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T18:43:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b6b1bc28-cf16-428c-9148-c54f8eecf769","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:54052","PortSpecifier":{"PortValue":54052}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b6b1bc28-cf16-428c-9148-c54f8eecf769","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f9520e.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T18:43:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b6b1bc28-cf16-428c-9148-c54f8eecf769","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:54052","PortSpecifier":{"PortValue":54052}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785350582,"nanos":247224246},"http":{"id":"b6b1bc28-cf16-428c-9148-c54f8eecf769","method":"POST","headers":{":authority":"e2e-shared-b-f9520e.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T18:43:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b6b1bc28-cf16-428c-9148-c54f8eecf769","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-29T18:43:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b6b1bc28-cf16-428c-9148-c54f8eecf769","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8e218b41-a126-4bf8-ae17-9a90356caab5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=178173f8-337c-4e3f-884b-fd9042aa046c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/31eca5b07dec"]}} {"level":"debug","ts":"2026-07-29T18:43:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b6b1bc28-cf16-428c-9148-c54f8eecf769","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/31eca5b07dec"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=178173f8-337c-4e3f-884b-fd9042aa046c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8e218b41-a126-4bf8-ae17-9a90356caab5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7917c29f12b01824cb9e894aedb318810880c38acffdbf5055ab7869f545c78e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f9520e.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T18:43:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b6b1bc28-cf16-428c-9148-c54f8eecf769","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:43:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b6b1bc28-cf16-428c-9148-c54f8eecf769","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:43:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b6b1bc28-cf16-428c-9148-c54f8eecf769","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f9520e/sub-test-model-f9520e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f9520e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:43:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b6b1bc28-cf16-428c-9148-c54f8eecf769","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-29T18:43:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b6b1bc28-cf16-428c-9148-c54f8eecf769","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T18:43:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b6b1bc28-cf16-428c-9148-c54f8eecf769","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-29T18:43:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b6b1bc28-cf16-428c-9148-c54f8eecf769","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T18:43:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b6b1bc28-cf16-428c-9148-c54f8eecf769","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T18:43:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e4574ee0-9389-4d62-8058-0cd338e84e48","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:48804","PortSpecifier":{"PortValue":48804}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e4574ee0-9389-4d62-8058-0cd338e84e48","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-297c4d.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T18:43:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e4574ee0-9389-4d62-8058-0cd338e84e48","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:48804","PortSpecifier":{"PortValue":48804}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785350582,"nanos":295714527},"http":{"id":"e4574ee0-9389-4d62-8058-0cd338e84e48","method":"GET","headers":{":authority":"e2e-shared-a-297c4d.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T18:43:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e4574ee0-9389-4d62-8058-0cd338e84e48","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1MneWrL5fvWIsnGxf_WkgiOZdMKydWig1jKziBXlPf18Rrg0FouHJeLaihcql"} {"level":"debug","ts":"2026-07-29T18:43:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e4574ee0-9389-4d62-8058-0cd338e84e48","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-297c4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1MneWrL5fvWIsnGxf_WkgiOZdMKydWig1jKziBXlPf18Rrg0FouHJeLaihcql\"}"} {"level":"debug","ts":"2026-07-29T18:43:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e4574ee0-9389-4d62-8058-0cd338e84e48","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-297c4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ab2d88af-77be-4044-afcb-9006e548d8cc","keyName":"e2e-sub-iso-0b9e8e","subscription":"e2e-a-only-33886a","tenant":"e2e-shared-a-297c4d","userId":"ab2d88af-77be-4044-afcb-9006e548d8cc","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-29T18:43:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e4574ee0-9389-4d62-8058-0cd338e84e48","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T18:43:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4574ee0-9389-4d62-8058-0cd338e84e48","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:43:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4574ee0-9389-4d62-8058-0cd338e84e48","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:43:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4574ee0-9389-4d62-8058-0cd338e84e48","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-297c4d/sub-test-model-297c4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-297c4d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:43:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e4574ee0-9389-4d62-8058-0cd338e84e48","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-29T18:43:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4574ee0-9389-4d62-8058-0cd338e84e48","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T18:43:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4574ee0-9389-4d62-8058-0cd338e84e48","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-29T18:43:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4574ee0-9389-4d62-8058-0cd338e84e48","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-33886a"} {"level":"info","ts":"2026-07-29T18:43:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e4574ee0-9389-4d62-8058-0cd338e84e48","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T18:43:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e4574ee0-9389-4d62-8058-0cd338e84e48","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T18:43:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1a9dd5d-b9f2-4100-a8e8-2c17e2543e5b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:54056","PortSpecifier":{"PortValue":54056}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c1a9dd5d-b9f2-4100-a8e8-2c17e2543e5b","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-f9520e.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T18:43:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1a9dd5d-b9f2-4100-a8e8-2c17e2543e5b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:54056","PortSpecifier":{"PortValue":54056}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785350582,"nanos":334031062},"http":{"id":"c1a9dd5d-b9f2-4100-a8e8-2c17e2543e5b","method":"GET","headers":{":authority":"e2e-shared-b-f9520e.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T18:43:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c1a9dd5d-b9f2-4100-a8e8-2c17e2543e5b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Hf2FhUXt4YqmGqIa_2V8x0tXYR3uHnodnx34gLzZuYugm8LNmqJyrYveJslw"} {"level":"debug","ts":"2026-07-29T18:43:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c1a9dd5d-b9f2-4100-a8e8-2c17e2543e5b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-f9520e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Hf2FhUXt4YqmGqIa_2V8x0tXYR3uHnodnx34gLzZuYugm8LNmqJyrYveJslw\"}"} {"level":"debug","ts":"2026-07-29T18:43:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c1a9dd5d-b9f2-4100-a8e8-2c17e2543e5b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f9520e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b012faee-9bbf-47a6-ac0b-589337cc8b61","keyName":"e2e-sub-iso-3b9764","subscription":"e2e-b-only-33886a","tenant":"e2e-shared-b-f9520e","userId":"b012faee-9bbf-47a6-ac0b-589337cc8b61","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-29T18:43:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c1a9dd5d-b9f2-4100-a8e8-2c17e2543e5b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T18:43:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1a9dd5d-b9f2-4100-a8e8-2c17e2543e5b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:43:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1a9dd5d-b9f2-4100-a8e8-2c17e2543e5b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:43:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1a9dd5d-b9f2-4100-a8e8-2c17e2543e5b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f9520e/sub-test-model-f9520e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f9520e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:43:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1a9dd5d-b9f2-4100-a8e8-2c17e2543e5b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-29T18:43:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1a9dd5d-b9f2-4100-a8e8-2c17e2543e5b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-33886a"} {"level":"debug","ts":"2026-07-29T18:43:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1a9dd5d-b9f2-4100-a8e8-2c17e2543e5b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T18:43:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c1a9dd5d-b9f2-4100-a8e8-2c17e2543e5b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-29T18:43:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1a9dd5d-b9f2-4100-a8e8-2c17e2543e5b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T18:43:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1a9dd5d-b9f2-4100-a8e8-2c17e2543e5b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T18:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0a729d64313292f1c304b109e5afed4706e80f40600b3f20aa6f2ee577f14c4e"} {"level":"info","ts":"2026-07-29T18:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/63b4c19daa8f9d07ec256101bccd00e4eb5c11db903937bd88097deaf5bb7289"} {"level":"info","ts":"2026-07-29T18:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5e15fcb107aeebb625fd1fa7460efb48b88d593b710c4b85961763fa84ac117f"} {"level":"info","ts":"2026-07-29T18:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/05b6efdc84f6d6089789d913573f40f7ef0be1920888d077f09a41a4cb30f2d3"} {"level":"info","ts":"2026-07-29T18:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cde9b48b44f6c93aad6ce66cb7a4b719c01030afc17736f1b44a0b9347f1654c"} {"level":"info","ts":"2026-07-29T18:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172"} {"level":"info","ts":"2026-07-29T18:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/21ba5bac51df8ff953c661d298aae6c4628b36759c1ad6993ef2b991e8463b3f"} {"level":"info","ts":"2026-07-29T18:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ae0f5bdd908cf44fc78659a75a7205328eff5a66558388b43e56d60e496ac6a5"} {"level":"info","ts":"2026-07-29T18:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a1fdbcbe5525393b447d1b3dab6abab64e8b19d5d26e9b93887b5029b803d0c8"} {"level":"info","ts":"2026-07-29T18:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4790b1b25298e14009979ec179a61df068352233f5724db54a8b40b0cd0f39d8"} {"level":"info","ts":"2026-07-29T18:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0f545e3ca1fa17139a149f2b64d745c040de12ceb7c06715db720d9c5f7900db"} {"level":"info","ts":"2026-07-29T18:43:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/facd6cc1c169775d93366a01293a49979c0dacf5c158d6186f41d5f9dc3b3e9e"} {"level":"debug","ts":"2026-07-29T18:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:43:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:43:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172"} {"level":"info","ts":"2026-07-29T18:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:43:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:43:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172"} {"level":"info","ts":"2026-07-29T18:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:43:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:43:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-29T18:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-29T18:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:43:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:43:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172"} {"level":"info","ts":"2026-07-29T18:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172"} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172"} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f545e3ca1fa17139a149f2b64d745c040de12ceb7c06715db720d9c5f7900db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172"} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f545e3ca1fa17139a149f2b64d745c040de12ceb7c06715db720d9c5f7900db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f545e3ca1fa17139a149f2b64d745c040de12ceb7c06715db720d9c5f7900db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f545e3ca1fa17139a149f2b64d745c040de12ceb7c06715db720d9c5f7900db"} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f545e3ca1fa17139a149f2b64d745c040de12ceb7c06715db720d9c5f7900db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172"} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f545e3ca1fa17139a149f2b64d745c040de12ceb7c06715db720d9c5f7900db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f545e3ca1fa17139a149f2b64d745c040de12ceb7c06715db720d9c5f7900db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f545e3ca1fa17139a149f2b64d745c040de12ceb7c06715db720d9c5f7900db"} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172"} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f545e3ca1fa17139a149f2b64d745c040de12ceb7c06715db720d9c5f7900db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f545e3ca1fa17139a149f2b64d745c040de12ceb7c06715db720d9c5f7900db"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172"} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f545e3ca1fa17139a149f2b64d745c040de12ceb7c06715db720d9c5f7900db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f545e3ca1fa17139a149f2b64d745c040de12ceb7c06715db720d9c5f7900db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f545e3ca1fa17139a149f2b64d745c040de12ceb7c06715db720d9c5f7900db"} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f545e3ca1fa17139a149f2b64d745c040de12ceb7c06715db720d9c5f7900db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f545e3ca1fa17139a149f2b64d745c040de12ceb7c06715db720d9c5f7900db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f545e3ca1fa17139a149f2b64d745c040de12ceb7c06715db720d9c5f7900db"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172"} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f545e3ca1fa17139a149f2b64d745c040de12ceb7c06715db720d9c5f7900db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f545e3ca1fa17139a149f2b64d745c040de12ceb7c06715db720d9c5f7900db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f545e3ca1fa17139a149f2b64d745c040de12ceb7c06715db720d9c5f7900db"} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f545e3ca1fa17139a149f2b64d745c040de12ceb7c06715db720d9c5f7900db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172"} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f545e3ca1fa17139a149f2b64d745c040de12ceb7c06715db720d9c5f7900db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f545e3ca1fa17139a149f2b64d745c040de12ceb7c06715db720d9c5f7900db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f545e3ca1fa17139a149f2b64d745c040de12ceb7c06715db720d9c5f7900db"} {"level":"error","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172"} {"level":"error","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f545e3ca1fa17139a149f2b64d745c040de12ceb7c06715db720d9c5f7900db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f545e3ca1fa17139a149f2b64d745c040de12ceb7c06715db720d9c5f7900db"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f545e3ca1fa17139a149f2b64d745c040de12ceb7c06715db720d9c5f7900db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f545e3ca1fa17139a149f2b64d745c040de12ceb7c06715db720d9c5f7900db","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172"} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f545e3ca1fa17139a149f2b64d745c040de12ceb7c06715db720d9c5f7900db"} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae0f5bdd908cf44fc78659a75a7205328eff5a66558388b43e56d60e496ac6a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae0f5bdd908cf44fc78659a75a7205328eff5a66558388b43e56d60e496ac6a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae0f5bdd908cf44fc78659a75a7205328eff5a66558388b43e56d60e496ac6a5"} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae0f5bdd908cf44fc78659a75a7205328eff5a66558388b43e56d60e496ac6a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae0f5bdd908cf44fc78659a75a7205328eff5a66558388b43e56d60e496ac6a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae0f5bdd908cf44fc78659a75a7205328eff5a66558388b43e56d60e496ac6a5"} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae0f5bdd908cf44fc78659a75a7205328eff5a66558388b43e56d60e496ac6a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae0f5bdd908cf44fc78659a75a7205328eff5a66558388b43e56d60e496ac6a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172"} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae0f5bdd908cf44fc78659a75a7205328eff5a66558388b43e56d60e496ac6a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae0f5bdd908cf44fc78659a75a7205328eff5a66558388b43e56d60e496ac6a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae0f5bdd908cf44fc78659a75a7205328eff5a66558388b43e56d60e496ac6a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae0f5bdd908cf44fc78659a75a7205328eff5a66558388b43e56d60e496ac6a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae0f5bdd908cf44fc78659a75a7205328eff5a66558388b43e56d60e496ac6a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae0f5bdd908cf44fc78659a75a7205328eff5a66558388b43e56d60e496ac6a5"} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae0f5bdd908cf44fc78659a75a7205328eff5a66558388b43e56d60e496ac6a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae0f5bdd908cf44fc78659a75a7205328eff5a66558388b43e56d60e496ac6a5"} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae0f5bdd908cf44fc78659a75a7205328eff5a66558388b43e56d60e496ac6a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae0f5bdd908cf44fc78659a75a7205328eff5a66558388b43e56d60e496ac6a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae0f5bdd908cf44fc78659a75a7205328eff5a66558388b43e56d60e496ac6a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae0f5bdd908cf44fc78659a75a7205328eff5a66558388b43e56d60e496ac6a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae0f5bdd908cf44fc78659a75a7205328eff5a66558388b43e56d60e496ac6a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae0f5bdd908cf44fc78659a75a7205328eff5a66558388b43e56d60e496ac6a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae0f5bdd908cf44fc78659a75a7205328eff5a66558388b43e56d60e496ac6a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae0f5bdd908cf44fc78659a75a7205328eff5a66558388b43e56d60e496ac6a5"} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae0f5bdd908cf44fc78659a75a7205328eff5a66558388b43e56d60e496ac6a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae0f5bdd908cf44fc78659a75a7205328eff5a66558388b43e56d60e496ac6a5"} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae0f5bdd908cf44fc78659a75a7205328eff5a66558388b43e56d60e496ac6a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae0f5bdd908cf44fc78659a75a7205328eff5a66558388b43e56d60e496ac6a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae0f5bdd908cf44fc78659a75a7205328eff5a66558388b43e56d60e496ac6a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae0f5bdd908cf44fc78659a75a7205328eff5a66558388b43e56d60e496ac6a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae0f5bdd908cf44fc78659a75a7205328eff5a66558388b43e56d60e496ac6a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae0f5bdd908cf44fc78659a75a7205328eff5a66558388b43e56d60e496ac6a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae0f5bdd908cf44fc78659a75a7205328eff5a66558388b43e56d60e496ac6a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae0f5bdd908cf44fc78659a75a7205328eff5a66558388b43e56d60e496ac6a5"} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde9b48b44f6c93aad6ce66cb7a4b719c01030afc17736f1b44a0b9347f1654c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae0f5bdd908cf44fc78659a75a7205328eff5a66558388b43e56d60e496ac6a5"} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde9b48b44f6c93aad6ce66cb7a4b719c01030afc17736f1b44a0b9347f1654c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae0f5bdd908cf44fc78659a75a7205328eff5a66558388b43e56d60e496ac6a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae0f5bdd908cf44fc78659a75a7205328eff5a66558388b43e56d60e496ac6a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde9b48b44f6c93aad6ce66cb7a4b719c01030afc17736f1b44a0b9347f1654c"} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae0f5bdd908cf44fc78659a75a7205328eff5a66558388b43e56d60e496ac6a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde9b48b44f6c93aad6ce66cb7a4b719c01030afc17736f1b44a0b9347f1654c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde9b48b44f6c93aad6ce66cb7a4b719c01030afc17736f1b44a0b9347f1654c"} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde9b48b44f6c93aad6ce66cb7a4b719c01030afc17736f1b44a0b9347f1654c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae0f5bdd908cf44fc78659a75a7205328eff5a66558388b43e56d60e496ac6a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae0f5bdd908cf44fc78659a75a7205328eff5a66558388b43e56d60e496ac6a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde9b48b44f6c93aad6ce66cb7a4b719c01030afc17736f1b44a0b9347f1654c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cde9b48b44f6c93aad6ce66cb7a4b719c01030afc17736f1b44a0b9347f1654c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae0f5bdd908cf44fc78659a75a7205328eff5a66558388b43e56d60e496ac6a5"} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde9b48b44f6c93aad6ce66cb7a4b719c01030afc17736f1b44a0b9347f1654c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae0f5bdd908cf44fc78659a75a7205328eff5a66558388b43e56d60e496ac6a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae0f5bdd908cf44fc78659a75a7205328eff5a66558388b43e56d60e496ac6a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae0f5bdd908cf44fc78659a75a7205328eff5a66558388b43e56d60e496ac6a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde9b48b44f6c93aad6ce66cb7a4b719c01030afc17736f1b44a0b9347f1654c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde9b48b44f6c93aad6ce66cb7a4b719c01030afc17736f1b44a0b9347f1654c"} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde9b48b44f6c93aad6ce66cb7a4b719c01030afc17736f1b44a0b9347f1654c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae0f5bdd908cf44fc78659a75a7205328eff5a66558388b43e56d60e496ac6a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae0f5bdd908cf44fc78659a75a7205328eff5a66558388b43e56d60e496ac6a5"} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae0f5bdd908cf44fc78659a75a7205328eff5a66558388b43e56d60e496ac6a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cde9b48b44f6c93aad6ce66cb7a4b719c01030afc17736f1b44a0b9347f1654c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae0f5bdd908cf44fc78659a75a7205328eff5a66558388b43e56d60e496ac6a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae0f5bdd908cf44fc78659a75a7205328eff5a66558388b43e56d60e496ac6a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae0f5bdd908cf44fc78659a75a7205328eff5a66558388b43e56d60e496ac6a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cde9b48b44f6c93aad6ce66cb7a4b719c01030afc17736f1b44a0b9347f1654c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae0f5bdd908cf44fc78659a75a7205328eff5a66558388b43e56d60e496ac6a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae0f5bdd908cf44fc78659a75a7205328eff5a66558388b43e56d60e496ac6a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde9b48b44f6c93aad6ce66cb7a4b719c01030afc17736f1b44a0b9347f1654c"} {"level":"error","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ae0f5bdd908cf44fc78659a75a7205328eff5a66558388b43e56d60e496ac6a5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ae0f5bdd908cf44fc78659a75a7205328eff5a66558388b43e56d60e496ac6a5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae0f5bdd908cf44fc78659a75a7205328eff5a66558388b43e56d60e496ac6a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae0f5bdd908cf44fc78659a75a7205328eff5a66558388b43e56d60e496ac6a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde9b48b44f6c93aad6ce66cb7a4b719c01030afc17736f1b44a0b9347f1654c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cde9b48b44f6c93aad6ce66cb7a4b719c01030afc17736f1b44a0b9347f1654c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae0f5bdd908cf44fc78659a75a7205328eff5a66558388b43e56d60e496ac6a5"} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde9b48b44f6c93aad6ce66cb7a4b719c01030afc17736f1b44a0b9347f1654c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae0f5bdd908cf44fc78659a75a7205328eff5a66558388b43e56d60e496ac6a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cde9b48b44f6c93aad6ce66cb7a4b719c01030afc17736f1b44a0b9347f1654c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae0f5bdd908cf44fc78659a75a7205328eff5a66558388b43e56d60e496ac6a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63b4c19daa8f9d07ec256101bccd00e4eb5c11db903937bd88097deaf5bb7289","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae0f5bdd908cf44fc78659a75a7205328eff5a66558388b43e56d60e496ac6a5"} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63b4c19daa8f9d07ec256101bccd00e4eb5c11db903937bd88097deaf5bb7289","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63b4c19daa8f9d07ec256101bccd00e4eb5c11db903937bd88097deaf5bb7289","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63b4c19daa8f9d07ec256101bccd00e4eb5c11db903937bd88097deaf5bb7289","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae0f5bdd908cf44fc78659a75a7205328eff5a66558388b43e56d60e496ac6a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae0f5bdd908cf44fc78659a75a7205328eff5a66558388b43e56d60e496ac6a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae0f5bdd908cf44fc78659a75a7205328eff5a66558388b43e56d60e496ac6a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63b4c19daa8f9d07ec256101bccd00e4eb5c11db903937bd88097deaf5bb7289","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae0f5bdd908cf44fc78659a75a7205328eff5a66558388b43e56d60e496ac6a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde9b48b44f6c93aad6ce66cb7a4b719c01030afc17736f1b44a0b9347f1654c"} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63b4c19daa8f9d07ec256101bccd00e4eb5c11db903937bd88097deaf5bb7289"} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63b4c19daa8f9d07ec256101bccd00e4eb5c11db903937bd88097deaf5bb7289","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63b4c19daa8f9d07ec256101bccd00e4eb5c11db903937bd88097deaf5bb7289"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae0f5bdd908cf44fc78659a75a7205328eff5a66558388b43e56d60e496ac6a5"} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63b4c19daa8f9d07ec256101bccd00e4eb5c11db903937bd88097deaf5bb7289","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63b4c19daa8f9d07ec256101bccd00e4eb5c11db903937bd88097deaf5bb7289","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:43:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63b4c19daa8f9d07ec256101bccd00e4eb5c11db903937bd88097deaf5bb7289","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63b4c19daa8f9d07ec256101bccd00e4eb5c11db903937bd88097deaf5bb7289","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63b4c19daa8f9d07ec256101bccd00e4eb5c11db903937bd88097deaf5bb7289","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63b4c19daa8f9d07ec256101bccd00e4eb5c11db903937bd88097deaf5bb7289"} {"level":"debug","ts":"2026-07-29T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63b4c19daa8f9d07ec256101bccd00e4eb5c11db903937bd88097deaf5bb7289","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63b4c19daa8f9d07ec256101bccd00e4eb5c11db903937bd88097deaf5bb7289"} {"level":"debug","ts":"2026-07-29T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63b4c19daa8f9d07ec256101bccd00e4eb5c11db903937bd88097deaf5bb7289","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:43:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:43:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63b4c19daa8f9d07ec256101bccd00e4eb5c11db903937bd88097deaf5bb7289"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63b4c19daa8f9d07ec256101bccd00e4eb5c11db903937bd88097deaf5bb7289","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63b4c19daa8f9d07ec256101bccd00e4eb5c11db903937bd88097deaf5bb7289","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:43:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:43:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63b4c19daa8f9d07ec256101bccd00e4eb5c11db903937bd88097deaf5bb7289","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"facd6cc1c169775d93366a01293a49979c0dacf5c158d6186f41d5f9dc3b3e9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:43:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:43:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63b4c19daa8f9d07ec256101bccd00e4eb5c11db903937bd88097deaf5bb7289"} {"level":"info","ts":"2026-07-29T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"facd6cc1c169775d93366a01293a49979c0dacf5c158d6186f41d5f9dc3b3e9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63b4c19daa8f9d07ec256101bccd00e4eb5c11db903937bd88097deaf5bb7289","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:43:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:43:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63b4c19daa8f9d07ec256101bccd00e4eb5c11db903937bd88097deaf5bb7289"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63b4c19daa8f9d07ec256101bccd00e4eb5c11db903937bd88097deaf5bb7289","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"facd6cc1c169775d93366a01293a49979c0dacf5c158d6186f41d5f9dc3b3e9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:43:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:43:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/facd6cc1c169775d93366a01293a49979c0dacf5c158d6186f41d5f9dc3b3e9e"} {"level":"info","ts":"2026-07-29T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63b4c19daa8f9d07ec256101bccd00e4eb5c11db903937bd88097deaf5bb7289"} {"level":"info","ts":"2026-07-29T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"facd6cc1c169775d93366a01293a49979c0dacf5c158d6186f41d5f9dc3b3e9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63b4c19daa8f9d07ec256101bccd00e4eb5c11db903937bd88097deaf5bb7289","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"facd6cc1c169775d93366a01293a49979c0dacf5c158d6186f41d5f9dc3b3e9e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/facd6cc1c169775d93366a01293a49979c0dacf5c158d6186f41d5f9dc3b3e9e"} {"level":"debug","ts":"2026-07-29T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"facd6cc1c169775d93366a01293a49979c0dacf5c158d6186f41d5f9dc3b3e9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1fdbcbe5525393b447d1b3dab6abab64e8b19d5d26e9b93887b5029b803d0c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:43:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:43:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/facd6cc1c169775d93366a01293a49979c0dacf5c158d6186f41d5f9dc3b3e9e"} {"level":"info","ts":"2026-07-29T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1fdbcbe5525393b447d1b3dab6abab64e8b19d5d26e9b93887b5029b803d0c8"} {"level":"info","ts":"2026-07-29T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1fdbcbe5525393b447d1b3dab6abab64e8b19d5d26e9b93887b5029b803d0c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"facd6cc1c169775d93366a01293a49979c0dacf5c158d6186f41d5f9dc3b3e9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:43:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:43:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["facd6cc1c169775d93366a01293a49979c0dacf5c158d6186f41d5f9dc3b3e9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1fdbcbe5525393b447d1b3dab6abab64e8b19d5d26e9b93887b5029b803d0c8"} {"level":"info","ts":"2026-07-29T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"facd6cc1c169775d93366a01293a49979c0dacf5c158d6186f41d5f9dc3b3e9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1fdbcbe5525393b447d1b3dab6abab64e8b19d5d26e9b93887b5029b803d0c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:43:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:43:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1fdbcbe5525393b447d1b3dab6abab64e8b19d5d26e9b93887b5029b803d0c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/facd6cc1c169775d93366a01293a49979c0dacf5c158d6186f41d5f9dc3b3e9e"} {"level":"info","ts":"2026-07-29T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4790b1b25298e14009979ec179a61df068352233f5724db54a8b40b0cd0f39d8"} {"level":"info","ts":"2026-07-29T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1fdbcbe5525393b447d1b3dab6abab64e8b19d5d26e9b93887b5029b803d0c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"facd6cc1c169775d93366a01293a49979c0dacf5c158d6186f41d5f9dc3b3e9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4790b1b25298e14009979ec179a61df068352233f5724db54a8b40b0cd0f39d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:43:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:43:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4790b1b25298e14009979ec179a61df068352233f5724db54a8b40b0cd0f39d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1fdbcbe5525393b447d1b3dab6abab64e8b19d5d26e9b93887b5029b803d0c8"} {"level":"info","ts":"2026-07-29T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4790b1b25298e14009979ec179a61df068352233f5724db54a8b40b0cd0f39d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1fdbcbe5525393b447d1b3dab6abab64e8b19d5d26e9b93887b5029b803d0c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4790b1b25298e14009979ec179a61df068352233f5724db54a8b40b0cd0f39d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21ba5bac51df8ff953c661d298aae6c4628b36759c1ad6993ef2b991e8463b3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:43:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:43:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4790b1b25298e14009979ec179a61df068352233f5724db54a8b40b0cd0f39d8"} {"level":"info","ts":"2026-07-29T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21ba5bac51df8ff953c661d298aae6c4628b36759c1ad6993ef2b991e8463b3f"} {"level":"info","ts":"2026-07-29T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21ba5bac51df8ff953c661d298aae6c4628b36759c1ad6993ef2b991e8463b3f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21ba5bac51df8ff953c661d298aae6c4628b36759c1ad6993ef2b991e8463b3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:43:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:43:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21ba5bac51df8ff953c661d298aae6c4628b36759c1ad6993ef2b991e8463b3f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21ba5bac51df8ff953c661d298aae6c4628b36759c1ad6993ef2b991e8463b3f"} {"level":"info","ts":"2026-07-29T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21ba5bac51df8ff953c661d298aae6c4628b36759c1ad6993ef2b991e8463b3f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21ba5bac51df8ff953c661d298aae6c4628b36759c1ad6993ef2b991e8463b3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:43:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:43:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21ba5bac51df8ff953c661d298aae6c4628b36759c1ad6993ef2b991e8463b3f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21ba5bac51df8ff953c661d298aae6c4628b36759c1ad6993ef2b991e8463b3f"} {"level":"info","ts":"2026-07-29T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e15fcb107aeebb625fd1fa7460efb48b88d593b710c4b85961763fa84ac117f"} {"level":"error","ts":"2026-07-29T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"21ba5bac51df8ff953c661d298aae6c4628b36759c1ad6993ef2b991e8463b3f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"21ba5bac51df8ff953c661d298aae6c4628b36759c1ad6993ef2b991e8463b3f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-29T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e15fcb107aeebb625fd1fa7460efb48b88d593b710c4b85961763fa84ac117f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:43:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:43:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e15fcb107aeebb625fd1fa7460efb48b88d593b710c4b85961763fa84ac117f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a729d64313292f1c304b109e5afed4706e80f40600b3f20aa6f2ee577f14c4e"} {"level":"info","ts":"2026-07-29T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e15fcb107aeebb625fd1fa7460efb48b88d593b710c4b85961763fa84ac117f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a729d64313292f1c304b109e5afed4706e80f40600b3f20aa6f2ee577f14c4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:43:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:43:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a729d64313292f1c304b109e5afed4706e80f40600b3f20aa6f2ee577f14c4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e15fcb107aeebb625fd1fa7460efb48b88d593b710c4b85961763fa84ac117f"} {"level":"info","ts":"2026-07-29T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05b6efdc84f6d6089789d913573f40f7ef0be1920888d077f09a41a4cb30f2d3"} {"level":"info","ts":"2026-07-29T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a729d64313292f1c304b109e5afed4706e80f40600b3f20aa6f2ee577f14c4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21ba5bac51df8ff953c661d298aae6c4628b36759c1ad6993ef2b991e8463b3f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e15fcb107aeebb625fd1fa7460efb48b88d593b710c4b85961763fa84ac117f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05b6efdc84f6d6089789d913573f40f7ef0be1920888d077f09a41a4cb30f2d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:43:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:43:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["05b6efdc84f6d6089789d913573f40f7ef0be1920888d077f09a41a4cb30f2d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a729d64313292f1c304b109e5afed4706e80f40600b3f20aa6f2ee577f14c4e"} {"level":"info","ts":"2026-07-29T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05b6efdc84f6d6089789d913573f40f7ef0be1920888d077f09a41a4cb30f2d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a729d64313292f1c304b109e5afed4706e80f40600b3f20aa6f2ee577f14c4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05b6efdc84f6d6089789d913573f40f7ef0be1920888d077f09a41a4cb30f2d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:43:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05b6efdc84f6d6089789d913573f40f7ef0be1920888d077f09a41a4cb30f2d3"} {"level":"info","ts":"2026-07-29T18:43:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e0d3b289-b1cd-462d-ad83-6ef0d783c961","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:55170","PortSpecifier":{"PortValue":55170}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e0d3b289-b1cd-462d-ad83-6ef0d783c961","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-297c4d.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T18:43:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e0d3b289-b1cd-462d-ad83-6ef0d783c961","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:55170","PortSpecifier":{"PortValue":55170}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785350620,"nanos":219963331},"http":{"id":"e0d3b289-b1cd-462d-ad83-6ef0d783c961","method":"POST","headers":{":authority":"e2e-shared-a-297c4d.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T18:43:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e0d3b289-b1cd-462d-ad83-6ef0d783c961","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-29T18:43:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e0d3b289-b1cd-462d-ad83-6ef0d783c961","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8e218b41-a126-4bf8-ae17-9a90356caab5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=178173f8-337c-4e3f-884b-fd9042aa046c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/31eca5b07dec"]}} {"level":"debug","ts":"2026-07-29T18:43:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e0d3b289-b1cd-462d-ad83-6ef0d783c961","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/31eca5b07dec"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=178173f8-337c-4e3f-884b-fd9042aa046c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8e218b41-a126-4bf8-ae17-9a90356caab5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0a729d64313292f1c304b109e5afed4706e80f40600b3f20aa6f2ee577f14c4e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-297c4d.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T18:43:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e0d3b289-b1cd-462d-ad83-6ef0d783c961","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:43:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e0d3b289-b1cd-462d-ad83-6ef0d783c961","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:43:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e0d3b289-b1cd-462d-ad83-6ef0d783c961","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-297c4d/sub-test-model-297c4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-297c4d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:43:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e0d3b289-b1cd-462d-ad83-6ef0d783c961","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-29T18:43:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e0d3b289-b1cd-462d-ad83-6ef0d783c961","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T18:43:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e0d3b289-b1cd-462d-ad83-6ef0d783c961","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-29T18:43:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e0d3b289-b1cd-462d-ad83-6ef0d783c961","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T18:43:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e0d3b289-b1cd-462d-ad83-6ef0d783c961","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T18:43:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c9796198-0fd1-4d19-ba6c-ed17c300f344","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43224","PortSpecifier":{"PortValue":43224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c9796198-0fd1-4d19-ba6c-ed17c300f344","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f9520e.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T18:43:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c9796198-0fd1-4d19-ba6c-ed17c300f344","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43224","PortSpecifier":{"PortValue":43224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785350620,"nanos":258272927},"http":{"id":"c9796198-0fd1-4d19-ba6c-ed17c300f344","method":"POST","headers":{":authority":"e2e-shared-b-f9520e.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T18:43:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c9796198-0fd1-4d19-ba6c-ed17c300f344","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-29T18:43:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c9796198-0fd1-4d19-ba6c-ed17c300f344","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8e218b41-a126-4bf8-ae17-9a90356caab5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=178173f8-337c-4e3f-884b-fd9042aa046c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/31eca5b07dec"]}} {"level":"debug","ts":"2026-07-29T18:43:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c9796198-0fd1-4d19-ba6c-ed17c300f344","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/31eca5b07dec"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=178173f8-337c-4e3f-884b-fd9042aa046c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8e218b41-a126-4bf8-ae17-9a90356caab5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7917c29f12b01824cb9e894aedb318810880c38acffdbf5055ab7869f545c78e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f9520e.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T18:43:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9796198-0fd1-4d19-ba6c-ed17c300f344","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:43:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9796198-0fd1-4d19-ba6c-ed17c300f344","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:43:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9796198-0fd1-4d19-ba6c-ed17c300f344","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f9520e/sub-test-model-f9520e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f9520e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:43:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c9796198-0fd1-4d19-ba6c-ed17c300f344","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-29T18:43:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9796198-0fd1-4d19-ba6c-ed17c300f344","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T18:43:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9796198-0fd1-4d19-ba6c-ed17c300f344","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-29T18:43:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c9796198-0fd1-4d19-ba6c-ed17c300f344","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T18:43:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c9796198-0fd1-4d19-ba6c-ed17c300f344","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T18:43:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ab4650df-afc6-4c5f-b03e-54e4b83901d0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:55182","PortSpecifier":{"PortValue":55182}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ab4650df-afc6-4c5f-b03e-54e4b83901d0","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-297c4d.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T18:43:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ab4650df-afc6-4c5f-b03e-54e4b83901d0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:55182","PortSpecifier":{"PortValue":55182}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785350620,"nanos":289169599},"http":{"id":"ab4650df-afc6-4c5f-b03e-54e4b83901d0","method":"POST","headers":{":authority":"e2e-shared-a-297c4d.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T18:43:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ab4650df-afc6-4c5f-b03e-54e4b83901d0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-aPX3yBXHgG2qafcV_flVMiHm1aOKO0lc5idt2fSQd5EVBJ5BrWK28J0JLwmo"} {"level":"debug","ts":"2026-07-29T18:43:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ab4650df-afc6-4c5f-b03e-54e4b83901d0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-297c4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-aPX3yBXHgG2qafcV_flVMiHm1aOKO0lc5idt2fSQd5EVBJ5BrWK28J0JLwmo\"}"} {"level":"debug","ts":"2026-07-29T18:43:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ab4650df-afc6-4c5f-b03e-54e4b83901d0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-297c4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"109f8ece-6ab3-4f30-906a-b74eed7b803e","keyName":"e2e-sub-iso-dafd39","subscription":"e2e-shared-sub-c6b57c","tenant":"e2e-shared-a-297c4d","userId":"109f8ece-6ab3-4f30-906a-b74eed7b803e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-29T18:43:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ab4650df-afc6-4c5f-b03e-54e4b83901d0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T18:43:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab4650df-afc6-4c5f-b03e-54e4b83901d0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:43:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab4650df-afc6-4c5f-b03e-54e4b83901d0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:43:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab4650df-afc6-4c5f-b03e-54e4b83901d0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-297c4d/sub-test-model-297c4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-297c4d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:43:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ab4650df-afc6-4c5f-b03e-54e4b83901d0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-29T18:43:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ab4650df-afc6-4c5f-b03e-54e4b83901d0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-c6b57c"} {"level":"debug","ts":"2026-07-29T18:43:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ab4650df-afc6-4c5f-b03e-54e4b83901d0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T18:43:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ab4650df-afc6-4c5f-b03e-54e4b83901d0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-29T18:43:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ab4650df-afc6-4c5f-b03e-54e4b83901d0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T18:43:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ab4650df-afc6-4c5f-b03e-54e4b83901d0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T18:43:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f446b616-994d-4ef2-abc4-f438c59d7605","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43236","PortSpecifier":{"PortValue":43236}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f446b616-994d-4ef2-abc4-f438c59d7605","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-f9520e.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T18:43:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f446b616-994d-4ef2-abc4-f438c59d7605","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43236","PortSpecifier":{"PortValue":43236}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785350620,"nanos":317303111},"http":{"id":"f446b616-994d-4ef2-abc4-f438c59d7605","method":"POST","headers":{":authority":"e2e-shared-b-f9520e.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T18:43:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f446b616-994d-4ef2-abc4-f438c59d7605","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-eGitKJGo8SPXU5X6_oUzevqmARvXkVBOVEo33df444f8Hg24vPKX1snTaQYW"} {"level":"debug","ts":"2026-07-29T18:43:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f446b616-994d-4ef2-abc4-f438c59d7605","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-f9520e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-eGitKJGo8SPXU5X6_oUzevqmARvXkVBOVEo33df444f8Hg24vPKX1snTaQYW\"}"} {"level":"debug","ts":"2026-07-29T18:43:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f446b616-994d-4ef2-abc4-f438c59d7605","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f9520e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"596c78bb-b6e7-4f35-99d2-7352117822e7","keyName":"e2e-sub-iso-a88f2e","subscription":"e2e-shared-sub-c6b57c","tenant":"e2e-shared-b-f9520e","userId":"596c78bb-b6e7-4f35-99d2-7352117822e7","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-29T18:43:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f446b616-994d-4ef2-abc4-f438c59d7605","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T18:43:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f446b616-994d-4ef2-abc4-f438c59d7605","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:43:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f446b616-994d-4ef2-abc4-f438c59d7605","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:43:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f446b616-994d-4ef2-abc4-f438c59d7605","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f9520e/sub-test-model-f9520e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f9520e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:43:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f446b616-994d-4ef2-abc4-f438c59d7605","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T18:43:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f446b616-994d-4ef2-abc4-f438c59d7605","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-c6b57c"} {"level":"debug","ts":"2026-07-29T18:43:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f446b616-994d-4ef2-abc4-f438c59d7605","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-29T18:43:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f446b616-994d-4ef2-abc4-f438c59d7605","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-29T18:43:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f446b616-994d-4ef2-abc4-f438c59d7605","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T18:43:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f446b616-994d-4ef2-abc4-f438c59d7605","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T18:43:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4790b1b25298e14009979ec179a61df068352233f5724db54a8b40b0cd0f39d8"} {"level":"info","ts":"2026-07-29T18:43:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cde9b48b44f6c93aad6ce66cb7a4b719c01030afc17736f1b44a0b9347f1654c"} {"level":"info","ts":"2026-07-29T18:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7917c29f12b01824cb9e894aedb318810880c38acffdbf5055ab7869f545c78e"} {"level":"info","ts":"2026-07-29T18:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4e2276825f749518988136133d83e5f02b3bac5fee60e1aeb3b4b6157348f29e"} {"level":"info","ts":"2026-07-29T18:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0f545e3ca1fa17139a149f2b64d745c040de12ceb7c06715db720d9c5f7900db"} {"level":"info","ts":"2026-07-29T18:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/de1148cdc83c21f965a5c6e3ca14fc1090fa05506625cfc114de9e48c7f9fd53"} {"level":"info","ts":"2026-07-29T18:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143"} {"level":"info","ts":"2026-07-29T18:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ae0f5bdd908cf44fc78659a75a7205328eff5a66558388b43e56d60e496ac6a5"} {"level":"info","ts":"2026-07-29T18:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4ac98c826e55628eb41a7c171f28f747018300dec7080383e949ebdbff83ac42"} {"level":"info","ts":"2026-07-29T18:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4c568eea772bdb57e6bb6ca671ef5c2fe6e20f66b02cc37007fdff87b5a4d066"} {"level":"info","ts":"2026-07-29T18:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/63b4c19daa8f9d07ec256101bccd00e4eb5c11db903937bd88097deaf5bb7289"} {"level":"info","ts":"2026-07-29T18:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/facd6cc1c169775d93366a01293a49979c0dacf5c158d6186f41d5f9dc3b3e9e"} {"level":"info","ts":"2026-07-29T18:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172"} {"level":"info","ts":"2026-07-29T18:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5d0dbb9a32e7171e82ffcf8627b957ebd85601b46acc773a839287bce2bb133f"} {"level":"info","ts":"2026-07-29T18:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a1fdbcbe5525393b447d1b3dab6abab64e8b19d5d26e9b93887b5029b803d0c8"} {"level":"info","ts":"2026-07-29T18:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/21ba5bac51df8ff953c661d298aae6c4628b36759c1ad6993ef2b991e8463b3f"} {"level":"info","ts":"2026-07-29T18:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cbedb7b2fcdfc63971b03634f6d2f89ee2eb79069a2cb314b010fbd7e58b0918"} {"level":"info","ts":"2026-07-29T18:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a24b802ca6c9e58058249a550b2d1e10ef1c73c6eadceac59391a513e63d56d4"} {"level":"info","ts":"2026-07-29T18:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0a729d64313292f1c304b109e5afed4706e80f40600b3f20aa6f2ee577f14c4e"} {"level":"info","ts":"2026-07-29T18:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/05b6efdc84f6d6089789d913573f40f7ef0be1920888d077f09a41a4cb30f2d3"} {"level":"info","ts":"2026-07-29T18:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5e15fcb107aeebb625fd1fa7460efb48b88d593b710c4b85961763fa84ac117f"} {"level":"info","ts":"2026-07-29T18:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d137042dc490409f38fcf2ec400abd802b891d10c0866c356d0715f2a39922bf"} {"level":"info","ts":"2026-07-29T18:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b0a86143e4058b6e66042116acb6c96f37dc4207eeb130e463d62c86cb3b3aa1"} {"level":"info","ts":"2026-07-29T18:43:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/45542b4e4b5aa0dab68cf69f2e8613e5af068bb9fe67e923ff66a0c94cd3cd6d"} {"level":"debug","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a729d64313292f1c304b109e5afed4706e80f40600b3f20aa6f2ee577f14c4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:45:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:45:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a729d64313292f1c304b109e5afed4706e80f40600b3f20aa6f2ee577f14c4e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a729d64313292f1c304b109e5afed4706e80f40600b3f20aa6f2ee577f14c4e"} {"level":"debug","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a729d64313292f1c304b109e5afed4706e80f40600b3f20aa6f2ee577f14c4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a729d64313292f1c304b109e5afed4706e80f40600b3f20aa6f2ee577f14c4e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a729d64313292f1c304b109e5afed4706e80f40600b3f20aa6f2ee577f14c4e"} {"level":"debug","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a729d64313292f1c304b109e5afed4706e80f40600b3f20aa6f2ee577f14c4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:45:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:45:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a729d64313292f1c304b109e5afed4706e80f40600b3f20aa6f2ee577f14c4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a729d64313292f1c304b109e5afed4706e80f40600b3f20aa6f2ee577f14c4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a729d64313292f1c304b109e5afed4706e80f40600b3f20aa6f2ee577f14c4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:45:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:45:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a729d64313292f1c304b109e5afed4706e80f40600b3f20aa6f2ee577f14c4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a729d64313292f1c304b109e5afed4706e80f40600b3f20aa6f2ee577f14c4e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a729d64313292f1c304b109e5afed4706e80f40600b3f20aa6f2ee577f14c4e"} {"level":"debug","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43328102117029f2edf2d5d14ee619089d94ed931b31abcbb18107a1cb59a040","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:45:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:45:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43328102117029f2edf2d5d14ee619089d94ed931b31abcbb18107a1cb59a040","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a729d64313292f1c304b109e5afed4706e80f40600b3f20aa6f2ee577f14c4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43328102117029f2edf2d5d14ee619089d94ed931b31abcbb18107a1cb59a040","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43328102117029f2edf2d5d14ee619089d94ed931b31abcbb18107a1cb59a040","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a729d64313292f1c304b109e5afed4706e80f40600b3f20aa6f2ee577f14c4e"} {"level":"debug","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a729d64313292f1c304b109e5afed4706e80f40600b3f20aa6f2ee577f14c4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:45:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:45:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a729d64313292f1c304b109e5afed4706e80f40600b3f20aa6f2ee577f14c4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43328102117029f2edf2d5d14ee619089d94ed931b31abcbb18107a1cb59a040"} {"level":"info","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a729d64313292f1c304b109e5afed4706e80f40600b3f20aa6f2ee577f14c4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43328102117029f2edf2d5d14ee619089d94ed931b31abcbb18107a1cb59a040","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:45:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:45:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43328102117029f2edf2d5d14ee619089d94ed931b31abcbb18107a1cb59a040"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43328102117029f2edf2d5d14ee619089d94ed931b31abcbb18107a1cb59a040","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a729d64313292f1c304b109e5afed4706e80f40600b3f20aa6f2ee577f14c4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:45:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:45:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a729d64313292f1c304b109e5afed4706e80f40600b3f20aa6f2ee577f14c4e"} {"level":"info","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a729d64313292f1c304b109e5afed4706e80f40600b3f20aa6f2ee577f14c4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43328102117029f2edf2d5d14ee619089d94ed931b31abcbb18107a1cb59a040","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:45:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:45:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43328102117029f2edf2d5d14ee619089d94ed931b31abcbb18107a1cb59a040"} {"level":"info","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43328102117029f2edf2d5d14ee619089d94ed931b31abcbb18107a1cb59a040","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a729d64313292f1c304b109e5afed4706e80f40600b3f20aa6f2ee577f14c4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f545e3ca1fa17139a149f2b64d745c040de12ceb7c06715db720d9c5f7900db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:45:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:45:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a729d64313292f1c304b109e5afed4706e80f40600b3f20aa6f2ee577f14c4e"} {"level":"info","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f545e3ca1fa17139a149f2b64d745c040de12ceb7c06715db720d9c5f7900db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43328102117029f2edf2d5d14ee619089d94ed931b31abcbb18107a1cb59a040","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:45:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:45:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43328102117029f2edf2d5d14ee619089d94ed931b31abcbb18107a1cb59a040"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f545e3ca1fa17139a149f2b64d745c040de12ceb7c06715db720d9c5f7900db"} {"level":"info","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43328102117029f2edf2d5d14ee619089d94ed931b31abcbb18107a1cb59a040","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a729d64313292f1c304b109e5afed4706e80f40600b3f20aa6f2ee577f14c4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:45:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:45:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a729d64313292f1c304b109e5afed4706e80f40600b3f20aa6f2ee577f14c4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43328102117029f2edf2d5d14ee619089d94ed931b31abcbb18107a1cb59a040"} {"level":"info","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a729d64313292f1c304b109e5afed4706e80f40600b3f20aa6f2ee577f14c4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45f37d7b63ea815e95132aa1b10f62ca808206f89e0e49364781365ab3743f2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:45:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:45:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45f37d7b63ea815e95132aa1b10f62ca808206f89e0e49364781365ab3743f2b"} {"level":"info","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45f37d7b63ea815e95132aa1b10f62ca808206f89e0e49364781365ab3743f2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f545e3ca1fa17139a149f2b64d745c040de12ceb7c06715db720d9c5f7900db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:45:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:45:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f545e3ca1fa17139a149f2b64d745c040de12ceb7c06715db720d9c5f7900db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43328102117029f2edf2d5d14ee619089d94ed931b31abcbb18107a1cb59a040","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a729d64313292f1c304b109e5afed4706e80f40600b3f20aa6f2ee577f14c4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45f37d7b63ea815e95132aa1b10f62ca808206f89e0e49364781365ab3743f2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:45:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:45:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["45f37d7b63ea815e95132aa1b10f62ca808206f89e0e49364781365ab3743f2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f545e3ca1fa17139a149f2b64d745c040de12ceb7c06715db720d9c5f7900db"} {"level":"info","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45f37d7b63ea815e95132aa1b10f62ca808206f89e0e49364781365ab3743f2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f545e3ca1fa17139a149f2b64d745c040de12ceb7c06715db720d9c5f7900db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:45:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:45:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f545e3ca1fa17139a149f2b64d745c040de12ceb7c06715db720d9c5f7900db"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43328102117029f2edf2d5d14ee619089d94ed931b31abcbb18107a1cb59a040"} {"level":"info","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f545e3ca1fa17139a149f2b64d745c040de12ceb7c06715db720d9c5f7900db","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45f37d7b63ea815e95132aa1b10f62ca808206f89e0e49364781365ab3743f2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f545e3ca1fa17139a149f2b64d745c040de12ceb7c06715db720d9c5f7900db","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a729d64313292f1c304b109e5afed4706e80f40600b3f20aa6f2ee577f14c4e"} {"level":"info","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45f37d7b63ea815e95132aa1b10f62ca808206f89e0e49364781365ab3743f2b"} {"level":"info","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f545e3ca1fa17139a149f2b64d745c040de12ceb7c06715db720d9c5f7900db"} {"level":"debug","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05b5c78981649d7238f8a7c2677d7a24c2f9a827c733e3325da7f0ce3deceee1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:45:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:45:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05b5c78981649d7238f8a7c2677d7a24c2f9a827c733e3325da7f0ce3deceee1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05b5c78981649d7238f8a7c2677d7a24c2f9a827c733e3325da7f0ce3deceee1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05b5c78981649d7238f8a7c2677d7a24c2f9a827c733e3325da7f0ce3deceee1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05b5c78981649d7238f8a7c2677d7a24c2f9a827c733e3325da7f0ce3deceee1"} {"level":"debug","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05b5c78981649d7238f8a7c2677d7a24c2f9a827c733e3325da7f0ce3deceee1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05b5c78981649d7238f8a7c2677d7a24c2f9a827c733e3325da7f0ce3deceee1"} {"level":"debug","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05b5c78981649d7238f8a7c2677d7a24c2f9a827c733e3325da7f0ce3deceee1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:45:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:45:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["05b5c78981649d7238f8a7c2677d7a24c2f9a827c733e3325da7f0ce3deceee1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05b5c78981649d7238f8a7c2677d7a24c2f9a827c733e3325da7f0ce3deceee1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05b5c78981649d7238f8a7c2677d7a24c2f9a827c733e3325da7f0ce3deceee1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:45:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:45:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05b5c78981649d7238f8a7c2677d7a24c2f9a827c733e3325da7f0ce3deceee1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe774f424e53cf8ad5bfa4e83dd4cc7110a408e5bdbfb3dc80aa07496bae6de9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:45:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:45:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05b5c78981649d7238f8a7c2677d7a24c2f9a827c733e3325da7f0ce3deceee1"} {"level":"info","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe774f424e53cf8ad5bfa4e83dd4cc7110a408e5bdbfb3dc80aa07496bae6de9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05b5c78981649d7238f8a7c2677d7a24c2f9a827c733e3325da7f0ce3deceee1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:45:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:45:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["05b5c78981649d7238f8a7c2677d7a24c2f9a827c733e3325da7f0ce3deceee1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05b5c78981649d7238f8a7c2677d7a24c2f9a827c733e3325da7f0ce3deceee1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe774f424e53cf8ad5bfa4e83dd4cc7110a408e5bdbfb3dc80aa07496bae6de9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:45:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:45:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe774f424e53cf8ad5bfa4e83dd4cc7110a408e5bdbfb3dc80aa07496bae6de9"} {"level":"info","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe774f424e53cf8ad5bfa4e83dd4cc7110a408e5bdbfb3dc80aa07496bae6de9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05b5c78981649d7238f8a7c2677d7a24c2f9a827c733e3325da7f0ce3deceee1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:45:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:45:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05b5c78981649d7238f8a7c2677d7a24c2f9a827c733e3325da7f0ce3deceee1"} {"level":"info","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05b5c78981649d7238f8a7c2677d7a24c2f9a827c733e3325da7f0ce3deceee1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe774f424e53cf8ad5bfa4e83dd4cc7110a408e5bdbfb3dc80aa07496bae6de9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05b5c78981649d7238f8a7c2677d7a24c2f9a827c733e3325da7f0ce3deceee1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:45:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:45:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["05b5c78981649d7238f8a7c2677d7a24c2f9a827c733e3325da7f0ce3deceee1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05b5c78981649d7238f8a7c2677d7a24c2f9a827c733e3325da7f0ce3deceee1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05b5c78981649d7238f8a7c2677d7a24c2f9a827c733e3325da7f0ce3deceee1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:45:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:45:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["05b5c78981649d7238f8a7c2677d7a24c2f9a827c733e3325da7f0ce3deceee1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe774f424e53cf8ad5bfa4e83dd4cc7110a408e5bdbfb3dc80aa07496bae6de9"} {"level":"error","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"05b5c78981649d7238f8a7c2677d7a24c2f9a827c733e3325da7f0ce3deceee1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"05b5c78981649d7238f8a7c2677d7a24c2f9a827c733e3325da7f0ce3deceee1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe774f424e53cf8ad5bfa4e83dd4cc7110a408e5bdbfb3dc80aa07496bae6de9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:45:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:45:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe774f424e53cf8ad5bfa4e83dd4cc7110a408e5bdbfb3dc80aa07496bae6de9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe774f424e53cf8ad5bfa4e83dd4cc7110a408e5bdbfb3dc80aa07496bae6de9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05b5c78981649d7238f8a7c2677d7a24c2f9a827c733e3325da7f0ce3deceee1"} {"level":"debug","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05b5c78981649d7238f8a7c2677d7a24c2f9a827c733e3325da7f0ce3deceee1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe774f424e53cf8ad5bfa4e83dd4cc7110a408e5bdbfb3dc80aa07496bae6de9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:45:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:45:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe774f424e53cf8ad5bfa4e83dd4cc7110a408e5bdbfb3dc80aa07496bae6de9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48b6b8f3b208855e00860b6dc66f971b1e1e5987af90ce8e7c0f6a1ac493a00c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:45:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:45:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe774f424e53cf8ad5bfa4e83dd4cc7110a408e5bdbfb3dc80aa07496bae6de9"} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48b6b8f3b208855e00860b6dc66f971b1e1e5987af90ce8e7c0f6a1ac493a00c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe774f424e53cf8ad5bfa4e83dd4cc7110a408e5bdbfb3dc80aa07496bae6de9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:45:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:45:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe774f424e53cf8ad5bfa4e83dd4cc7110a408e5bdbfb3dc80aa07496bae6de9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48b6b8f3b208855e00860b6dc66f971b1e1e5987af90ce8e7c0f6a1ac493a00c"} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe774f424e53cf8ad5bfa4e83dd4cc7110a408e5bdbfb3dc80aa07496bae6de9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48b6b8f3b208855e00860b6dc66f971b1e1e5987af90ce8e7c0f6a1ac493a00c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:45:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:45:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48b6b8f3b208855e00860b6dc66f971b1e1e5987af90ce8e7c0f6a1ac493a00c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48b6b8f3b208855e00860b6dc66f971b1e1e5987af90ce8e7c0f6a1ac493a00c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe774f424e53cf8ad5bfa4e83dd4cc7110a408e5bdbfb3dc80aa07496bae6de9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:45:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:45:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe774f424e53cf8ad5bfa4e83dd4cc7110a408e5bdbfb3dc80aa07496bae6de9"} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe774f424e53cf8ad5bfa4e83dd4cc7110a408e5bdbfb3dc80aa07496bae6de9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48b6b8f3b208855e00860b6dc66f971b1e1e5987af90ce8e7c0f6a1ac493a00c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:45:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:45:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48b6b8f3b208855e00860b6dc66f971b1e1e5987af90ce8e7c0f6a1ac493a00c"} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48b6b8f3b208855e00860b6dc66f971b1e1e5987af90ce8e7c0f6a1ac493a00c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe774f424e53cf8ad5bfa4e83dd4cc7110a408e5bdbfb3dc80aa07496bae6de9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48b6b8f3b208855e00860b6dc66f971b1e1e5987af90ce8e7c0f6a1ac493a00c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:45:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:45:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48b6b8f3b208855e00860b6dc66f971b1e1e5987af90ce8e7c0f6a1ac493a00c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe774f424e53cf8ad5bfa4e83dd4cc7110a408e5bdbfb3dc80aa07496bae6de9"} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48b6b8f3b208855e00860b6dc66f971b1e1e5987af90ce8e7c0f6a1ac493a00c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe774f424e53cf8ad5bfa4e83dd4cc7110a408e5bdbfb3dc80aa07496bae6de9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:45:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:45:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe774f424e53cf8ad5bfa4e83dd4cc7110a408e5bdbfb3dc80aa07496bae6de9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe774f424e53cf8ad5bfa4e83dd4cc7110a408e5bdbfb3dc80aa07496bae6de9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48b6b8f3b208855e00860b6dc66f971b1e1e5987af90ce8e7c0f6a1ac493a00c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:45:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:45:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48b6b8f3b208855e00860b6dc66f971b1e1e5987af90ce8e7c0f6a1ac493a00c"} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48b6b8f3b208855e00860b6dc66f971b1e1e5987af90ce8e7c0f6a1ac493a00c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe774f424e53cf8ad5bfa4e83dd4cc7110a408e5bdbfb3dc80aa07496bae6de9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:45:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:45:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe774f424e53cf8ad5bfa4e83dd4cc7110a408e5bdbfb3dc80aa07496bae6de9"} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe774f424e53cf8ad5bfa4e83dd4cc7110a408e5bdbfb3dc80aa07496bae6de9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48b6b8f3b208855e00860b6dc66f971b1e1e5987af90ce8e7c0f6a1ac493a00c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe774f424e53cf8ad5bfa4e83dd4cc7110a408e5bdbfb3dc80aa07496bae6de9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:45:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:45:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe774f424e53cf8ad5bfa4e83dd4cc7110a408e5bdbfb3dc80aa07496bae6de9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48b6b8f3b208855e00860b6dc66f971b1e1e5987af90ce8e7c0f6a1ac493a00c"} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe774f424e53cf8ad5bfa4e83dd4cc7110a408e5bdbfb3dc80aa07496bae6de9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48b6b8f3b208855e00860b6dc66f971b1e1e5987af90ce8e7c0f6a1ac493a00c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:45:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:45:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48b6b8f3b208855e00860b6dc66f971b1e1e5987af90ce8e7c0f6a1ac493a00c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe774f424e53cf8ad5bfa4e83dd4cc7110a408e5bdbfb3dc80aa07496bae6de9"} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48b6b8f3b208855e00860b6dc66f971b1e1e5987af90ce8e7c0f6a1ac493a00c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe774f424e53cf8ad5bfa4e83dd4cc7110a408e5bdbfb3dc80aa07496bae6de9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:45:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:45:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe774f424e53cf8ad5bfa4e83dd4cc7110a408e5bdbfb3dc80aa07496bae6de9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48b6b8f3b208855e00860b6dc66f971b1e1e5987af90ce8e7c0f6a1ac493a00c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:45:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:45:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe774f424e53cf8ad5bfa4e83dd4cc7110a408e5bdbfb3dc80aa07496bae6de9"} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe774f424e53cf8ad5bfa4e83dd4cc7110a408e5bdbfb3dc80aa07496bae6de9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:45:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:45:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe774f424e53cf8ad5bfa4e83dd4cc7110a408e5bdbfb3dc80aa07496bae6de9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48b6b8f3b208855e00860b6dc66f971b1e1e5987af90ce8e7c0f6a1ac493a00c"} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe774f424e53cf8ad5bfa4e83dd4cc7110a408e5bdbfb3dc80aa07496bae6de9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:45:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:45:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143"} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe774f424e53cf8ad5bfa4e83dd4cc7110a408e5bdbfb3dc80aa07496bae6de9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:45:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:45:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe774f424e53cf8ad5bfa4e83dd4cc7110a408e5bdbfb3dc80aa07496bae6de9"} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe774f424e53cf8ad5bfa4e83dd4cc7110a408e5bdbfb3dc80aa07496bae6de9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe774f424e53cf8ad5bfa4e83dd4cc7110a408e5bdbfb3dc80aa07496bae6de9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:45:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:45:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe774f424e53cf8ad5bfa4e83dd4cc7110a408e5bdbfb3dc80aa07496bae6de9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe774f424e53cf8ad5bfa4e83dd4cc7110a408e5bdbfb3dc80aa07496bae6de9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe774f424e53cf8ad5bfa4e83dd4cc7110a408e5bdbfb3dc80aa07496bae6de9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:45:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:45:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe774f424e53cf8ad5bfa4e83dd4cc7110a408e5bdbfb3dc80aa07496bae6de9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143"} {"level":"error","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fe774f424e53cf8ad5bfa4e83dd4cc7110a408e5bdbfb3dc80aa07496bae6de9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fe774f424e53cf8ad5bfa4e83dd4cc7110a408e5bdbfb3dc80aa07496bae6de9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:45:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:45:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe774f424e53cf8ad5bfa4e83dd4cc7110a408e5bdbfb3dc80aa07496bae6de9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:45:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:45:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe774f424e53cf8ad5bfa4e83dd4cc7110a408e5bdbfb3dc80aa07496bae6de9"} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe774f424e53cf8ad5bfa4e83dd4cc7110a408e5bdbfb3dc80aa07496bae6de9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:45:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:45:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143"} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe774f424e53cf8ad5bfa4e83dd4cc7110a408e5bdbfb3dc80aa07496bae6de9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:45:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:45:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe774f424e53cf8ad5bfa4e83dd4cc7110a408e5bdbfb3dc80aa07496bae6de9"} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:45:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:45:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe774f424e53cf8ad5bfa4e83dd4cc7110a408e5bdbfb3dc80aa07496bae6de9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:45:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:45:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe774f424e53cf8ad5bfa4e83dd4cc7110a408e5bdbfb3dc80aa07496bae6de9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143"} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe774f424e53cf8ad5bfa4e83dd4cc7110a408e5bdbfb3dc80aa07496bae6de9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a23e4d6a211005b92dce6fc2ddd6a9a4829fe54e41205fdbbf6f9dd7ca368dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:45:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:45:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143"} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a23e4d6a211005b92dce6fc2ddd6a9a4829fe54e41205fdbbf6f9dd7ca368dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe774f424e53cf8ad5bfa4e83dd4cc7110a408e5bdbfb3dc80aa07496bae6de9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a23e4d6a211005b92dce6fc2ddd6a9a4829fe54e41205fdbbf6f9dd7ca368dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:45:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:45:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a23e4d6a211005b92dce6fc2ddd6a9a4829fe54e41205fdbbf6f9dd7ca368dc"} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a23e4d6a211005b92dce6fc2ddd6a9a4829fe54e41205fdbbf6f9dd7ca368dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:45:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:45:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe774f424e53cf8ad5bfa4e83dd4cc7110a408e5bdbfb3dc80aa07496bae6de9"} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a23e4d6a211005b92dce6fc2ddd6a9a4829fe54e41205fdbbf6f9dd7ca368dc"} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a23e4d6a211005b92dce6fc2ddd6a9a4829fe54e41205fdbbf6f9dd7ca368dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:45:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:45:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a23e4d6a211005b92dce6fc2ddd6a9a4829fe54e41205fdbbf6f9dd7ca368dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143"} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a23e4d6a211005b92dce6fc2ddd6a9a4829fe54e41205fdbbf6f9dd7ca368dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a23e4d6a211005b92dce6fc2ddd6a9a4829fe54e41205fdbbf6f9dd7ca368dc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a23e4d6a211005b92dce6fc2ddd6a9a4829fe54e41205fdbbf6f9dd7ca368dc"} {"level":"debug","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82a5dcde8914be0b3997520d860c14c88014fb8eff91f8f5cec842a9dd552434","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:45:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:45:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82a5dcde8914be0b3997520d860c14c88014fb8eff91f8f5cec842a9dd552434","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f63b7a7d70d7d457d01bfeefbb7696d195d06d4062c66b2d46510bf3fa1726d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:45:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:45:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f63b7a7d70d7d457d01bfeefbb7696d195d06d4062c66b2d46510bf3fa1726d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82a5dcde8914be0b3997520d860c14c88014fb8eff91f8f5cec842a9dd552434","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f63b7a7d70d7d457d01bfeefbb7696d195d06d4062c66b2d46510bf3fa1726d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f63b7a7d70d7d457d01bfeefbb7696d195d06d4062c66b2d46510bf3fa1726d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82a5dcde8914be0b3997520d860c14c88014fb8eff91f8f5cec842a9dd552434","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82a5dcde8914be0b3997520d860c14c88014fb8eff91f8f5cec842a9dd552434"} {"level":"debug","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f63b7a7d70d7d457d01bfeefbb7696d195d06d4062c66b2d46510bf3fa1726d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:45:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:45:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f63b7a7d70d7d457d01bfeefbb7696d195d06d4062c66b2d46510bf3fa1726d"} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f63b7a7d70d7d457d01bfeefbb7696d195d06d4062c66b2d46510bf3fa1726d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82a5dcde8914be0b3997520d860c14c88014fb8eff91f8f5cec842a9dd552434","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f63b7a7d70d7d457d01bfeefbb7696d195d06d4062c66b2d46510bf3fa1726d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:45:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:45:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f63b7a7d70d7d457d01bfeefbb7696d195d06d4062c66b2d46510bf3fa1726d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82a5dcde8914be0b3997520d860c14c88014fb8eff91f8f5cec842a9dd552434"} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f63b7a7d70d7d457d01bfeefbb7696d195d06d4062c66b2d46510bf3fa1726d"} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f2bd57884ae9235a468a31eb8b25e86f0434f9c34bfacf26cd767230e186697"} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f63b7a7d70d7d457d01bfeefbb7696d195d06d4062c66b2d46510bf3fa1726d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f2bd57884ae9235a468a31eb8b25e86f0434f9c34bfacf26cd767230e186697","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:45:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:45:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f2bd57884ae9235a468a31eb8b25e86f0434f9c34bfacf26cd767230e186697"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f63b7a7d70d7d457d01bfeefbb7696d195d06d4062c66b2d46510bf3fa1726d"} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f2bd57884ae9235a468a31eb8b25e86f0434f9c34bfacf26cd767230e186697","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82a5dcde8914be0b3997520d860c14c88014fb8eff91f8f5cec842a9dd552434","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:45:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:45:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["82a5dcde8914be0b3997520d860c14c88014fb8eff91f8f5cec842a9dd552434"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f2bd57884ae9235a468a31eb8b25e86f0434f9c34bfacf26cd767230e186697"} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0addac64f96203e2fce5318a894ed580676450fab7ba5a3dbc555b85b8999d5b"} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82a5dcde8914be0b3997520d860c14c88014fb8eff91f8f5cec842a9dd552434","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f63b7a7d70d7d457d01bfeefbb7696d195d06d4062c66b2d46510bf3fa1726d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f2bd57884ae9235a468a31eb8b25e86f0434f9c34bfacf26cd767230e186697","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0addac64f96203e2fce5318a894ed580676450fab7ba5a3dbc555b85b8999d5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:45:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:45:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0addac64f96203e2fce5318a894ed580676450fab7ba5a3dbc555b85b8999d5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21ba5bac51df8ff953c661d298aae6c4628b36759c1ad6993ef2b991e8463b3f"} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8a000d29c2a852cfcafa3a960ebfd341604d9973f28989d4878c4ce6c52a7d2"} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0addac64f96203e2fce5318a894ed580676450fab7ba5a3dbc555b85b8999d5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21ba5bac51df8ff953c661d298aae6c4628b36759c1ad6993ef2b991e8463b3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:45:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:45:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21ba5bac51df8ff953c661d298aae6c4628b36759c1ad6993ef2b991e8463b3f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82a5dcde8914be0b3997520d860c14c88014fb8eff91f8f5cec842a9dd552434"} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c395ab0e8d70e8b9556fd5292af3b7f9efefa61a624412d8283b84c38c051a52"} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33723cf06fd4b00f9b92c4c2791f737e8ddc3587a52f7390714bbec47f72c03a"} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21ba5bac51df8ff953c661d298aae6c4628b36759c1ad6993ef2b991e8463b3f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8a000d29c2a852cfcafa3a960ebfd341604d9973f28989d4878c4ce6c52a7d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:45:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:45:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8a000d29c2a852cfcafa3a960ebfd341604d9973f28989d4878c4ce6c52a7d2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0addac64f96203e2fce5318a894ed580676450fab7ba5a3dbc555b85b8999d5b"} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30f760de95a7f72fcb6fe5da8ac8e6865bd51eeaaddf5cfdc9f1aab46a3e2e99"} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8a000d29c2a852cfcafa3a960ebfd341604d9973f28989d4878c4ce6c52a7d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82a5dcde8914be0b3997520d860c14c88014fb8eff91f8f5cec842a9dd552434","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c395ab0e8d70e8b9556fd5292af3b7f9efefa61a624412d8283b84c38c051a52","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:45:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:45:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c395ab0e8d70e8b9556fd5292af3b7f9efefa61a624412d8283b84c38c051a52"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7917c29f12b01824cb9e894aedb318810880c38acffdbf5055ab7869f545c78e"} {"level":"info","ts":"2026-07-29T18:45:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de1148cdc83c21f965a5c6e3ca14fc1090fa05506625cfc114de9e48c7f9fd53"} {"level":"info","ts":"2026-07-29T18:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c395ab0e8d70e8b9556fd5292af3b7f9efefa61a624412d8283b84c38c051a52","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33723cf06fd4b00f9b92c4c2791f737e8ddc3587a52f7390714bbec47f72c03a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:45:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:45:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33723cf06fd4b00f9b92c4c2791f737e8ddc3587a52f7390714bbec47f72c03a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21ba5bac51df8ff953c661d298aae6c4628b36759c1ad6993ef2b991e8463b3f"} {"level":"info","ts":"2026-07-29T18:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a45c4a268f18be94047528c4760402c4b80541952abbe0cf87c3f8257cecc94"} {"level":"info","ts":"2026-07-29T18:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172"} {"level":"info","ts":"2026-07-29T18:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33723cf06fd4b00f9b92c4c2791f737e8ddc3587a52f7390714bbec47f72c03a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0addac64f96203e2fce5318a894ed580676450fab7ba5a3dbc555b85b8999d5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30f760de95a7f72fcb6fe5da8ac8e6865bd51eeaaddf5cfdc9f1aab46a3e2e99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:45:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:45:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30f760de95a7f72fcb6fe5da8ac8e6865bd51eeaaddf5cfdc9f1aab46a3e2e99"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8a000d29c2a852cfcafa3a960ebfd341604d9973f28989d4878c4ce6c52a7d2"} {"level":"info","ts":"2026-07-29T18:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c568eea772bdb57e6bb6ca671ef5c2fe6e20f66b02cc37007fdff87b5a4d066"} {"level":"info","ts":"2026-07-29T18:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30f760de95a7f72fcb6fe5da8ac8e6865bd51eeaaddf5cfdc9f1aab46a3e2e99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7917c29f12b01824cb9e894aedb318810880c38acffdbf5055ab7869f545c78e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:45:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:45:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7917c29f12b01824cb9e894aedb318810880c38acffdbf5055ab7869f545c78e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10d136424db654ae93d966e75d946df6c388f8c7964840c449af0e20f3b720ce"} {"level":"info","ts":"2026-07-29T18:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c395ab0e8d70e8b9556fd5292af3b7f9efefa61a624412d8283b84c38c051a52"} {"level":"info","ts":"2026-07-29T18:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33723cf06fd4b00f9b92c4c2791f737e8ddc3587a52f7390714bbec47f72c03a"} {"level":"info","ts":"2026-07-29T18:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7917c29f12b01824cb9e894aedb318810880c38acffdbf5055ab7869f545c78e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de1148cdc83c21f965a5c6e3ca14fc1090fa05506625cfc114de9e48c7f9fd53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:45:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:45:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de1148cdc83c21f965a5c6e3ca14fc1090fa05506625cfc114de9e48c7f9fd53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30f760de95a7f72fcb6fe5da8ac8e6865bd51eeaaddf5cfdc9f1aab46a3e2e99"} {"level":"info","ts":"2026-07-29T18:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7917c29f12b01824cb9e894aedb318810880c38acffdbf5055ab7869f545c78e"} {"level":"info","ts":"2026-07-29T18:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de1148cdc83c21f965a5c6e3ca14fc1090fa05506625cfc114de9e48c7f9fd53","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21ba5bac51df8ff953c661d298aae6c4628b36759c1ad6993ef2b991e8463b3f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a45c4a268f18be94047528c4760402c4b80541952abbe0cf87c3f8257cecc94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:45:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:45:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a45c4a268f18be94047528c4760402c4b80541952abbe0cf87c3f8257cecc94"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de1148cdc83c21f965a5c6e3ca14fc1090fa05506625cfc114de9e48c7f9fd53"} {"level":"info","ts":"2026-07-29T18:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a45c4a268f18be94047528c4760402c4b80541952abbe0cf87c3f8257cecc94","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:45:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:45:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a45c4a268f18be94047528c4760402c4b80541952abbe0cf87c3f8257cecc94"} {"level":"info","ts":"2026-07-29T18:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8a000d29c2a852cfcafa3a960ebfd341604d9973f28989d4878c4ce6c52a7d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c568eea772bdb57e6bb6ca671ef5c2fe6e20f66b02cc37007fdff87b5a4d066","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:45:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:45:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c568eea772bdb57e6bb6ca671ef5c2fe6e20f66b02cc37007fdff87b5a4d066"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172"} {"level":"info","ts":"2026-07-29T18:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c568eea772bdb57e6bb6ca671ef5c2fe6e20f66b02cc37007fdff87b5a4d066","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10d136424db654ae93d966e75d946df6c388f8c7964840c449af0e20f3b720ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:45:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:45:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["10d136424db654ae93d966e75d946df6c388f8c7964840c449af0e20f3b720ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c568eea772bdb57e6bb6ca671ef5c2fe6e20f66b02cc37007fdff87b5a4d066"} {"level":"info","ts":"2026-07-29T18:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10d136424db654ae93d966e75d946df6c388f8c7964840c449af0e20f3b720ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c395ab0e8d70e8b9556fd5292af3b7f9efefa61a624412d8283b84c38c051a52","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33723cf06fd4b00f9b92c4c2791f737e8ddc3587a52f7390714bbec47f72c03a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30f760de95a7f72fcb6fe5da8ac8e6865bd51eeaaddf5cfdc9f1aab46a3e2e99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7917c29f12b01824cb9e894aedb318810880c38acffdbf5055ab7869f545c78e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de1148cdc83c21f965a5c6e3ca14fc1090fa05506625cfc114de9e48c7f9fd53","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a45c4a268f18be94047528c4760402c4b80541952abbe0cf87c3f8257cecc94","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c568eea772bdb57e6bb6ca671ef5c2fe6e20f66b02cc37007fdff87b5a4d066","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"10d136424db654ae93d966e75d946df6c388f8c7964840c449af0e20f3b720ce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10d136424db654ae93d966e75d946df6c388f8c7964840c449af0e20f3b720ce"} {"level":"info","ts":"2026-07-29T18:45:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9bbc6568-5dc1-4432-b0e0-c4dc56b9d8ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50252","PortSpecifier":{"PortValue":50252}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9bbc6568-5dc1-4432-b0e0-c4dc56b9d8ec","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-297c4d.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T18:45:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9bbc6568-5dc1-4432-b0e0-c4dc56b9d8ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50252","PortSpecifier":{"PortValue":50252}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785350720,"nanos":40499062},"http":{"id":"9bbc6568-5dc1-4432-b0e0-c4dc56b9d8ec","method":"POST","headers":{":authority":"e2e-shared-a-297c4d.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T18:45:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9bbc6568-5dc1-4432-b0e0-c4dc56b9d8ec","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-29T18:45:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9bbc6568-5dc1-4432-b0e0-c4dc56b9d8ec","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8e218b41-a126-4bf8-ae17-9a90356caab5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=178173f8-337c-4e3f-884b-fd9042aa046c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/31eca5b07dec"]}} {"level":"debug","ts":"2026-07-29T18:45:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9bbc6568-5dc1-4432-b0e0-c4dc56b9d8ec","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/31eca5b07dec"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=178173f8-337c-4e3f-884b-fd9042aa046c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8e218b41-a126-4bf8-ae17-9a90356caab5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0a729d64313292f1c304b109e5afed4706e80f40600b3f20aa6f2ee577f14c4e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-297c4d.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T18:45:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9bbc6568-5dc1-4432-b0e0-c4dc56b9d8ec","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:45:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9bbc6568-5dc1-4432-b0e0-c4dc56b9d8ec","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:45:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9bbc6568-5dc1-4432-b0e0-c4dc56b9d8ec","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-297c4d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:45:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9bbc6568-5dc1-4432-b0e0-c4dc56b9d8ec","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-29T18:45:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9bbc6568-5dc1-4432-b0e0-c4dc56b9d8ec","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-29T18:45:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9bbc6568-5dc1-4432-b0e0-c4dc56b9d8ec","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-29T18:45:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9bbc6568-5dc1-4432-b0e0-c4dc56b9d8ec","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T18:45:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9bbc6568-5dc1-4432-b0e0-c4dc56b9d8ec","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T18:45:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ea5d966c-302f-443d-b48d-944f2e283fa6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:47358","PortSpecifier":{"PortValue":47358}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ea5d966c-302f-443d-b48d-944f2e283fa6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f9520e.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T18:45:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ea5d966c-302f-443d-b48d-944f2e283fa6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:47358","PortSpecifier":{"PortValue":47358}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785350720,"nanos":77208104},"http":{"id":"ea5d966c-302f-443d-b48d-944f2e283fa6","method":"POST","headers":{":authority":"e2e-shared-b-f9520e.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T18:45:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ea5d966c-302f-443d-b48d-944f2e283fa6","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-29T18:45:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ea5d966c-302f-443d-b48d-944f2e283fa6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8e218b41-a126-4bf8-ae17-9a90356caab5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=178173f8-337c-4e3f-884b-fd9042aa046c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/31eca5b07dec"]}} {"level":"debug","ts":"2026-07-29T18:45:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ea5d966c-302f-443d-b48d-944f2e283fa6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/31eca5b07dec"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=178173f8-337c-4e3f-884b-fd9042aa046c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8e218b41-a126-4bf8-ae17-9a90356caab5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7917c29f12b01824cb9e894aedb318810880c38acffdbf5055ab7869f545c78e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f9520e.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T18:45:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea5d966c-302f-443d-b48d-944f2e283fa6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:45:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea5d966c-302f-443d-b48d-944f2e283fa6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:45:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea5d966c-302f-443d-b48d-944f2e283fa6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f9520e/rate-test-model-f9520e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f9520e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:45:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ea5d966c-302f-443d-b48d-944f2e283fa6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-29T18:45:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea5d966c-302f-443d-b48d-944f2e283fa6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T18:45:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea5d966c-302f-443d-b48d-944f2e283fa6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-29T18:45:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ea5d966c-302f-443d-b48d-944f2e283fa6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T18:45:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ea5d966c-302f-443d-b48d-944f2e283fa6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T18:45:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b405b319-91ff-4b28-b42d-ab36ca706783","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50260","PortSpecifier":{"PortValue":50260}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b405b319-91ff-4b28-b42d-ab36ca706783","method":"POST","path":"/ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d/v1/completions","host":"e2e-shared-a-297c4d.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T18:45:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b405b319-91ff-4b28-b42d-ab36ca706783","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50260","PortSpecifier":{"PortValue":50260}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785350720,"nanos":115296554},"http":{"id":"b405b319-91ff-4b28-b42d-ab36ca706783","method":"POST","headers":{":authority":"e2e-shared-a-297c4d.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T18:45:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b405b319-91ff-4b28-b42d-ab36ca706783","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-114MxkoZxvIPgq3MZ_MlvvNWJIhqkkwPa2FaVy3dFsu085D9ZpZe8EXTz2wHL"} {"level":"debug","ts":"2026-07-29T18:45:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b405b319-91ff-4b28-b42d-ab36ca706783","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-297c4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-114MxkoZxvIPgq3MZ_MlvvNWJIhqkkwPa2FaVy3dFsu085D9ZpZe8EXTz2wHL\"}"} {"level":"debug","ts":"2026-07-29T18:45:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b405b319-91ff-4b28-b42d-ab36ca706783","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-297c4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"688acfd2-3f7b-4ee3-bd68-e140f81d9d62","keyName":"e2e-rate-a-75cdaa","subscription":"e2e-rate-iso-a-75cdaa","tenant":"e2e-shared-a-297c4d","userId":"688acfd2-3f7b-4ee3-bd68-e140f81d9d62","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-29T18:45:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b405b319-91ff-4b28-b42d-ab36ca706783","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-297c4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d\",\"requestedSubscription\":\"e2e-rate-iso-a-75cdaa\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-29T18:45:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b405b319-91ff-4b28-b42d-ab36ca706783","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-297c4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-297c4d/models/facebook/opt-125m","name":"rate-test-model-297c4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-75cdaa","namespace":"ai-tenant-e2e-shared-a-297c4d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d"}} {"level":"debug","ts":"2026-07-29T18:45:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b405b319-91ff-4b28-b42d-ab36ca706783","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T18:45:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b405b319-91ff-4b28-b42d-ab36ca706783","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:45:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b405b319-91ff-4b28-b42d-ab36ca706783","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:45:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b405b319-91ff-4b28-b42d-ab36ca706783","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:45:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b405b319-91ff-4b28-b42d-ab36ca706783","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-297c4d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:45:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b405b319-91ff-4b28-b42d-ab36ca706783","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T18:45:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b405b319-91ff-4b28-b42d-ab36ca706783","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-29T18:45:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b405b319-91ff-4b28-b42d-ab36ca706783","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-75cdaa"} {"level":"debug","ts":"2026-07-29T18:45:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b405b319-91ff-4b28-b42d-ab36ca706783","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"688acfd2-3f7b-4ee3-bd68-e140f81d9d62","keyName":"e2e-rate-a-75cdaa","selected_subscription":"e2e-rate-iso-a-75cdaa","selected_subscription_key":"ai-tenant-e2e-shared-a-297c4d/e2e-rate-iso-a-75cdaa@ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-297c4d/models/facebook/opt-125m","name":"rate-test-model-297c4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-75cdaa","namespace":"ai-tenant-e2e-shared-a-297c4d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-29T18:45:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b405b319-91ff-4b28-b42d-ab36ca706783","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T18:45:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b405b319-91ff-4b28-b42d-ab36ca706783","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T18:45:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52de5de5-f39f-4833-ad05-111b40189e27","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53204","PortSpecifier":{"PortValue":53204}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"52de5de5-f39f-4833-ad05-111b40189e27","method":"POST","path":"/ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d/v1/completions","host":"e2e-shared-a-297c4d.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T18:45:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52de5de5-f39f-4833-ad05-111b40189e27","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53204","PortSpecifier":{"PortValue":53204}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785350721,"nanos":205305516},"http":{"id":"52de5de5-f39f-4833-ad05-111b40189e27","method":"POST","headers":{":authority":"e2e-shared-a-297c4d.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T18:45:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"52de5de5-f39f-4833-ad05-111b40189e27","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-114MxkoZxvIPgq3MZ_MlvvNWJIhqkkwPa2FaVy3dFsu085D9ZpZe8EXTz2wHL"} {"level":"debug","ts":"2026-07-29T18:45:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"52de5de5-f39f-4833-ad05-111b40189e27","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-297c4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-114MxkoZxvIPgq3MZ_MlvvNWJIhqkkwPa2FaVy3dFsu085D9ZpZe8EXTz2wHL\"}"} {"level":"debug","ts":"2026-07-29T18:45:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"52de5de5-f39f-4833-ad05-111b40189e27","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-297c4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"688acfd2-3f7b-4ee3-bd68-e140f81d9d62","keyName":"e2e-rate-a-75cdaa","subscription":"e2e-rate-iso-a-75cdaa","tenant":"e2e-shared-a-297c4d","userId":"688acfd2-3f7b-4ee3-bd68-e140f81d9d62","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-29T18:45:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"52de5de5-f39f-4833-ad05-111b40189e27","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-297c4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d\",\"requestedSubscription\":\"e2e-rate-iso-a-75cdaa\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-29T18:45:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"52de5de5-f39f-4833-ad05-111b40189e27","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-297c4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-297c4d/models/facebook/opt-125m","name":"rate-test-model-297c4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-75cdaa","namespace":"ai-tenant-e2e-shared-a-297c4d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d"}} {"level":"debug","ts":"2026-07-29T18:45:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"52de5de5-f39f-4833-ad05-111b40189e27","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T18:45:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52de5de5-f39f-4833-ad05-111b40189e27","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:45:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52de5de5-f39f-4833-ad05-111b40189e27","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:45:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52de5de5-f39f-4833-ad05-111b40189e27","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-297c4d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:45:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52de5de5-f39f-4833-ad05-111b40189e27","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:45:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52de5de5-f39f-4833-ad05-111b40189e27","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T18:45:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52de5de5-f39f-4833-ad05-111b40189e27","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-75cdaa"} {"level":"debug","ts":"2026-07-29T18:45:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52de5de5-f39f-4833-ad05-111b40189e27","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-29T18:45:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52de5de5-f39f-4833-ad05-111b40189e27","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"688acfd2-3f7b-4ee3-bd68-e140f81d9d62","keyName":"e2e-rate-a-75cdaa","selected_subscription":"e2e-rate-iso-a-75cdaa","selected_subscription_key":"ai-tenant-e2e-shared-a-297c4d/e2e-rate-iso-a-75cdaa@ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-297c4d/models/facebook/opt-125m","name":"rate-test-model-297c4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-75cdaa","namespace":"ai-tenant-e2e-shared-a-297c4d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-29T18:45:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52de5de5-f39f-4833-ad05-111b40189e27","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T18:45:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52de5de5-f39f-4833-ad05-111b40189e27","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T18:45:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fddbefba-eff6-4545-8be9-575f6e12f5a2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53214","PortSpecifier":{"PortValue":53214}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fddbefba-eff6-4545-8be9-575f6e12f5a2","method":"POST","path":"/ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d/v1/completions","host":"e2e-shared-a-297c4d.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T18:45:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fddbefba-eff6-4545-8be9-575f6e12f5a2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53214","PortSpecifier":{"PortValue":53214}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785350722,"nanos":242794982},"http":{"id":"fddbefba-eff6-4545-8be9-575f6e12f5a2","method":"POST","headers":{":authority":"e2e-shared-a-297c4d.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T18:45:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fddbefba-eff6-4545-8be9-575f6e12f5a2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-114MxkoZxvIPgq3MZ_MlvvNWJIhqkkwPa2FaVy3dFsu085D9ZpZe8EXTz2wHL"} {"level":"debug","ts":"2026-07-29T18:45:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fddbefba-eff6-4545-8be9-575f6e12f5a2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-297c4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-114MxkoZxvIPgq3MZ_MlvvNWJIhqkkwPa2FaVy3dFsu085D9ZpZe8EXTz2wHL\"}"} {"level":"debug","ts":"2026-07-29T18:45:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fddbefba-eff6-4545-8be9-575f6e12f5a2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-297c4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"688acfd2-3f7b-4ee3-bd68-e140f81d9d62","keyName":"e2e-rate-a-75cdaa","subscription":"e2e-rate-iso-a-75cdaa","tenant":"e2e-shared-a-297c4d","userId":"688acfd2-3f7b-4ee3-bd68-e140f81d9d62","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-29T18:45:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fddbefba-eff6-4545-8be9-575f6e12f5a2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-297c4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d\",\"requestedSubscription\":\"e2e-rate-iso-a-75cdaa\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-29T18:45:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fddbefba-eff6-4545-8be9-575f6e12f5a2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-297c4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-297c4d/models/facebook/opt-125m","name":"rate-test-model-297c4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-75cdaa","namespace":"ai-tenant-e2e-shared-a-297c4d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d"}} {"level":"debug","ts":"2026-07-29T18:45:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fddbefba-eff6-4545-8be9-575f6e12f5a2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T18:45:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fddbefba-eff6-4545-8be9-575f6e12f5a2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:45:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fddbefba-eff6-4545-8be9-575f6e12f5a2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:45:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fddbefba-eff6-4545-8be9-575f6e12f5a2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-297c4d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:45:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fddbefba-eff6-4545-8be9-575f6e12f5a2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:45:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fddbefba-eff6-4545-8be9-575f6e12f5a2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T18:45:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fddbefba-eff6-4545-8be9-575f6e12f5a2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-75cdaa"} {"level":"debug","ts":"2026-07-29T18:45:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fddbefba-eff6-4545-8be9-575f6e12f5a2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-29T18:45:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fddbefba-eff6-4545-8be9-575f6e12f5a2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"688acfd2-3f7b-4ee3-bd68-e140f81d9d62","keyName":"e2e-rate-a-75cdaa","selected_subscription":"e2e-rate-iso-a-75cdaa","selected_subscription_key":"ai-tenant-e2e-shared-a-297c4d/e2e-rate-iso-a-75cdaa@ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-297c4d/models/facebook/opt-125m","name":"rate-test-model-297c4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-75cdaa","namespace":"ai-tenant-e2e-shared-a-297c4d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-29T18:45:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fddbefba-eff6-4545-8be9-575f6e12f5a2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T18:45:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fddbefba-eff6-4545-8be9-575f6e12f5a2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T18:45:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cb3106da-9821-40b2-9f80-be190d7388f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41660","PortSpecifier":{"PortValue":41660}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cb3106da-9821-40b2-9f80-be190d7388f9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-297c4d.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T18:45:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cb3106da-9821-40b2-9f80-be190d7388f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41660","PortSpecifier":{"PortValue":41660}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785350741,"nanos":271590799},"http":{"id":"cb3106da-9821-40b2-9f80-be190d7388f9","method":"POST","headers":{":authority":"e2e-shared-a-297c4d.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T18:45:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cb3106da-9821-40b2-9f80-be190d7388f9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-29T18:45:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cb3106da-9821-40b2-9f80-be190d7388f9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8e218b41-a126-4bf8-ae17-9a90356caab5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=178173f8-337c-4e3f-884b-fd9042aa046c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/31eca5b07dec"]}} {"level":"debug","ts":"2026-07-29T18:45:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cb3106da-9821-40b2-9f80-be190d7388f9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/31eca5b07dec"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=178173f8-337c-4e3f-884b-fd9042aa046c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8e218b41-a126-4bf8-ae17-9a90356caab5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0a729d64313292f1c304b109e5afed4706e80f40600b3f20aa6f2ee577f14c4e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-297c4d.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T18:45:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb3106da-9821-40b2-9f80-be190d7388f9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:45:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb3106da-9821-40b2-9f80-be190d7388f9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:45:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb3106da-9821-40b2-9f80-be190d7388f9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-297c4d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:45:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cb3106da-9821-40b2-9f80-be190d7388f9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-29T18:45:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb3106da-9821-40b2-9f80-be190d7388f9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T18:45:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb3106da-9821-40b2-9f80-be190d7388f9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-29T18:45:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cb3106da-9821-40b2-9f80-be190d7388f9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T18:45:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cb3106da-9821-40b2-9f80-be190d7388f9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T18:45:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d8108540-c00d-4433-92fd-08846276ee5b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:57020","PortSpecifier":{"PortValue":57020}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d8108540-c00d-4433-92fd-08846276ee5b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f9520e.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T18:45:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d8108540-c00d-4433-92fd-08846276ee5b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:57020","PortSpecifier":{"PortValue":57020}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785350741,"nanos":307287914},"http":{"id":"d8108540-c00d-4433-92fd-08846276ee5b","method":"POST","headers":{":authority":"e2e-shared-b-f9520e.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T18:45:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d8108540-c00d-4433-92fd-08846276ee5b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-29T18:45:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d8108540-c00d-4433-92fd-08846276ee5b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8e218b41-a126-4bf8-ae17-9a90356caab5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=178173f8-337c-4e3f-884b-fd9042aa046c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/31eca5b07dec"]}} {"level":"debug","ts":"2026-07-29T18:45:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d8108540-c00d-4433-92fd-08846276ee5b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/31eca5b07dec"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=178173f8-337c-4e3f-884b-fd9042aa046c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8e218b41-a126-4bf8-ae17-9a90356caab5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7917c29f12b01824cb9e894aedb318810880c38acffdbf5055ab7869f545c78e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f9520e.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T18:45:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d8108540-c00d-4433-92fd-08846276ee5b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:45:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d8108540-c00d-4433-92fd-08846276ee5b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:45:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d8108540-c00d-4433-92fd-08846276ee5b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f9520e/rate-test-model-f9520e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f9520e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:45:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d8108540-c00d-4433-92fd-08846276ee5b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-29T18:45:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d8108540-c00d-4433-92fd-08846276ee5b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-29T18:45:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d8108540-c00d-4433-92fd-08846276ee5b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-29T18:45:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d8108540-c00d-4433-92fd-08846276ee5b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T18:45:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d8108540-c00d-4433-92fd-08846276ee5b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T18:45:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1b401834-e198-4581-891a-dab44314b652","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41674","PortSpecifier":{"PortValue":41674}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1b401834-e198-4581-891a-dab44314b652","method":"POST","path":"/ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d/v1/completions","host":"e2e-shared-a-297c4d.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T18:45:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1b401834-e198-4581-891a-dab44314b652","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41674","PortSpecifier":{"PortValue":41674}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785350741,"nanos":340031342},"http":{"id":"1b401834-e198-4581-891a-dab44314b652","method":"POST","headers":{":authority":"e2e-shared-a-297c4d.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T18:45:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1b401834-e198-4581-891a-dab44314b652","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6T209SQKTglDFQZZ_iUUg3pMW2f1HXvUJP297aXTggyTwRcWf09yfj82AZgd"} {"level":"debug","ts":"2026-07-29T18:45:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1b401834-e198-4581-891a-dab44314b652","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-297c4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6T209SQKTglDFQZZ_iUUg3pMW2f1HXvUJP297aXTggyTwRcWf09yfj82AZgd\"}"} {"level":"debug","ts":"2026-07-29T18:45:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1b401834-e198-4581-891a-dab44314b652","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-297c4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3e81bb34-6f42-4c25-8775-f01aac06823b","keyName":"e2e-rate-a-447727","subscription":"e2e-rate-iso-a-447727","tenant":"e2e-shared-a-297c4d","userId":"3e81bb34-6f42-4c25-8775-f01aac06823b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-29T18:45:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1b401834-e198-4581-891a-dab44314b652","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-297c4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d\",\"requestedSubscription\":\"e2e-rate-iso-a-447727\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-29T18:45:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1b401834-e198-4581-891a-dab44314b652","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-297c4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-297c4d/models/facebook/opt-125m","name":"rate-test-model-297c4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-447727","namespace":"ai-tenant-e2e-shared-a-297c4d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d"}} {"level":"debug","ts":"2026-07-29T18:45:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1b401834-e198-4581-891a-dab44314b652","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T18:45:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b401834-e198-4581-891a-dab44314b652","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:45:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b401834-e198-4581-891a-dab44314b652","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:45:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b401834-e198-4581-891a-dab44314b652","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-297c4d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:45:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b401834-e198-4581-891a-dab44314b652","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:45:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1b401834-e198-4581-891a-dab44314b652","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T18:45:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1b401834-e198-4581-891a-dab44314b652","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-447727"} {"level":"debug","ts":"2026-07-29T18:45:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1b401834-e198-4581-891a-dab44314b652","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-29T18:45:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1b401834-e198-4581-891a-dab44314b652","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3e81bb34-6f42-4c25-8775-f01aac06823b","keyName":"e2e-rate-a-447727","selected_subscription":"e2e-rate-iso-a-447727","selected_subscription_key":"ai-tenant-e2e-shared-a-297c4d/e2e-rate-iso-a-447727@ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-297c4d/models/facebook/opt-125m","name":"rate-test-model-297c4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-447727","namespace":"ai-tenant-e2e-shared-a-297c4d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-29T18:45:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1b401834-e198-4581-891a-dab44314b652","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T18:45:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1b401834-e198-4581-891a-dab44314b652","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T18:45:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5701deb5-c626-411d-b093-de99915a805f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41676","PortSpecifier":{"PortValue":41676}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5701deb5-c626-411d-b093-de99915a805f","method":"POST","path":"/ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d/v1/completions","host":"e2e-shared-a-297c4d.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T18:45:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5701deb5-c626-411d-b093-de99915a805f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41676","PortSpecifier":{"PortValue":41676}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785350742,"nanos":383687491},"http":{"id":"5701deb5-c626-411d-b093-de99915a805f","method":"POST","headers":{":authority":"e2e-shared-a-297c4d.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T18:45:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5701deb5-c626-411d-b093-de99915a805f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6T209SQKTglDFQZZ_iUUg3pMW2f1HXvUJP297aXTggyTwRcWf09yfj82AZgd"} {"level":"debug","ts":"2026-07-29T18:45:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5701deb5-c626-411d-b093-de99915a805f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-297c4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6T209SQKTglDFQZZ_iUUg3pMW2f1HXvUJP297aXTggyTwRcWf09yfj82AZgd\"}"} {"level":"debug","ts":"2026-07-29T18:45:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5701deb5-c626-411d-b093-de99915a805f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-297c4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3e81bb34-6f42-4c25-8775-f01aac06823b","keyName":"e2e-rate-a-447727","subscription":"e2e-rate-iso-a-447727","tenant":"e2e-shared-a-297c4d","userId":"3e81bb34-6f42-4c25-8775-f01aac06823b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-29T18:45:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5701deb5-c626-411d-b093-de99915a805f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-297c4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d\",\"requestedSubscription\":\"e2e-rate-iso-a-447727\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-29T18:45:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5701deb5-c626-411d-b093-de99915a805f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-297c4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-297c4d/models/facebook/opt-125m","name":"rate-test-model-297c4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-447727","namespace":"ai-tenant-e2e-shared-a-297c4d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d"}} {"level":"debug","ts":"2026-07-29T18:45:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5701deb5-c626-411d-b093-de99915a805f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T18:45:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5701deb5-c626-411d-b093-de99915a805f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:45:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5701deb5-c626-411d-b093-de99915a805f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:45:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5701deb5-c626-411d-b093-de99915a805f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-297c4d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:45:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5701deb5-c626-411d-b093-de99915a805f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:45:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5701deb5-c626-411d-b093-de99915a805f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-447727"} {"level":"debug","ts":"2026-07-29T18:45:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5701deb5-c626-411d-b093-de99915a805f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T18:45:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5701deb5-c626-411d-b093-de99915a805f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-29T18:45:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5701deb5-c626-411d-b093-de99915a805f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3e81bb34-6f42-4c25-8775-f01aac06823b","keyName":"e2e-rate-a-447727","selected_subscription":"e2e-rate-iso-a-447727","selected_subscription_key":"ai-tenant-e2e-shared-a-297c4d/e2e-rate-iso-a-447727@ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-297c4d/models/facebook/opt-125m","name":"rate-test-model-297c4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-447727","namespace":"ai-tenant-e2e-shared-a-297c4d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-29T18:45:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5701deb5-c626-411d-b093-de99915a805f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T18:45:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5701deb5-c626-411d-b093-de99915a805f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T18:45:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"be2e74ec-5e59-47d2-b81b-8f2b73d71ca5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41692","PortSpecifier":{"PortValue":41692}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"be2e74ec-5e59-47d2-b81b-8f2b73d71ca5","method":"POST","path":"/ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d/v1/completions","host":"e2e-shared-a-297c4d.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T18:45:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"be2e74ec-5e59-47d2-b81b-8f2b73d71ca5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41692","PortSpecifier":{"PortValue":41692}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785350743,"nanos":417498738},"http":{"id":"be2e74ec-5e59-47d2-b81b-8f2b73d71ca5","method":"POST","headers":{":authority":"e2e-shared-a-297c4d.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T18:45:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"be2e74ec-5e59-47d2-b81b-8f2b73d71ca5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6T209SQKTglDFQZZ_iUUg3pMW2f1HXvUJP297aXTggyTwRcWf09yfj82AZgd"} {"level":"debug","ts":"2026-07-29T18:45:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"be2e74ec-5e59-47d2-b81b-8f2b73d71ca5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-297c4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6T209SQKTglDFQZZ_iUUg3pMW2f1HXvUJP297aXTggyTwRcWf09yfj82AZgd\"}"} {"level":"debug","ts":"2026-07-29T18:45:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"be2e74ec-5e59-47d2-b81b-8f2b73d71ca5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-297c4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3e81bb34-6f42-4c25-8775-f01aac06823b","keyName":"e2e-rate-a-447727","subscription":"e2e-rate-iso-a-447727","tenant":"e2e-shared-a-297c4d","userId":"3e81bb34-6f42-4c25-8775-f01aac06823b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-29T18:45:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"be2e74ec-5e59-47d2-b81b-8f2b73d71ca5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-297c4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d\",\"requestedSubscription\":\"e2e-rate-iso-a-447727\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-29T18:45:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"be2e74ec-5e59-47d2-b81b-8f2b73d71ca5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-297c4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-297c4d/models/facebook/opt-125m","name":"rate-test-model-297c4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-447727","namespace":"ai-tenant-e2e-shared-a-297c4d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d"}} {"level":"debug","ts":"2026-07-29T18:45:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"be2e74ec-5e59-47d2-b81b-8f2b73d71ca5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T18:45:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be2e74ec-5e59-47d2-b81b-8f2b73d71ca5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:45:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be2e74ec-5e59-47d2-b81b-8f2b73d71ca5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:45:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be2e74ec-5e59-47d2-b81b-8f2b73d71ca5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-297c4d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:45:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be2e74ec-5e59-47d2-b81b-8f2b73d71ca5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:45:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be2e74ec-5e59-47d2-b81b-8f2b73d71ca5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T18:45:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be2e74ec-5e59-47d2-b81b-8f2b73d71ca5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-29T18:45:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be2e74ec-5e59-47d2-b81b-8f2b73d71ca5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-447727"} {"level":"debug","ts":"2026-07-29T18:45:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be2e74ec-5e59-47d2-b81b-8f2b73d71ca5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3e81bb34-6f42-4c25-8775-f01aac06823b","keyName":"e2e-rate-a-447727","selected_subscription":"e2e-rate-iso-a-447727","selected_subscription_key":"ai-tenant-e2e-shared-a-297c4d/e2e-rate-iso-a-447727@ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-297c4d/models/facebook/opt-125m","name":"rate-test-model-297c4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-447727","namespace":"ai-tenant-e2e-shared-a-297c4d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-29T18:45:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"be2e74ec-5e59-47d2-b81b-8f2b73d71ca5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T18:45:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"be2e74ec-5e59-47d2-b81b-8f2b73d71ca5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T18:45:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"617c196d-4abf-40bb-9548-51696d3ea4ea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41708","PortSpecifier":{"PortValue":41708}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"617c196d-4abf-40bb-9548-51696d3ea4ea","method":"POST","path":"/ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d/v1/completions","host":"e2e-shared-a-297c4d.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T18:45:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"617c196d-4abf-40bb-9548-51696d3ea4ea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41708","PortSpecifier":{"PortValue":41708}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785350744,"nanos":451561285},"http":{"id":"617c196d-4abf-40bb-9548-51696d3ea4ea","method":"POST","headers":{":authority":"e2e-shared-a-297c4d.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T18:45:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"617c196d-4abf-40bb-9548-51696d3ea4ea","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6T209SQKTglDFQZZ_iUUg3pMW2f1HXvUJP297aXTggyTwRcWf09yfj82AZgd"} {"level":"debug","ts":"2026-07-29T18:45:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"617c196d-4abf-40bb-9548-51696d3ea4ea","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-297c4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6T209SQKTglDFQZZ_iUUg3pMW2f1HXvUJP297aXTggyTwRcWf09yfj82AZgd\"}"} {"level":"debug","ts":"2026-07-29T18:45:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"617c196d-4abf-40bb-9548-51696d3ea4ea","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-297c4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3e81bb34-6f42-4c25-8775-f01aac06823b","keyName":"e2e-rate-a-447727","subscription":"e2e-rate-iso-a-447727","tenant":"e2e-shared-a-297c4d","userId":"3e81bb34-6f42-4c25-8775-f01aac06823b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-29T18:45:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"617c196d-4abf-40bb-9548-51696d3ea4ea","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-297c4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d\",\"requestedSubscription\":\"e2e-rate-iso-a-447727\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-29T18:45:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"617c196d-4abf-40bb-9548-51696d3ea4ea","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-297c4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-297c4d/models/facebook/opt-125m","name":"rate-test-model-297c4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-447727","namespace":"ai-tenant-e2e-shared-a-297c4d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d"}} {"level":"debug","ts":"2026-07-29T18:45:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"617c196d-4abf-40bb-9548-51696d3ea4ea","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T18:45:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"617c196d-4abf-40bb-9548-51696d3ea4ea","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:45:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"617c196d-4abf-40bb-9548-51696d3ea4ea","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:45:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"617c196d-4abf-40bb-9548-51696d3ea4ea","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:45:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"617c196d-4abf-40bb-9548-51696d3ea4ea","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-297c4d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:45:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"617c196d-4abf-40bb-9548-51696d3ea4ea","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T18:45:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"617c196d-4abf-40bb-9548-51696d3ea4ea","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-447727"} {"level":"debug","ts":"2026-07-29T18:45:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"617c196d-4abf-40bb-9548-51696d3ea4ea","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-29T18:45:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"617c196d-4abf-40bb-9548-51696d3ea4ea","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3e81bb34-6f42-4c25-8775-f01aac06823b","keyName":"e2e-rate-a-447727","selected_subscription":"e2e-rate-iso-a-447727","selected_subscription_key":"ai-tenant-e2e-shared-a-297c4d/e2e-rate-iso-a-447727@ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-297c4d/models/facebook/opt-125m","name":"rate-test-model-297c4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-447727","namespace":"ai-tenant-e2e-shared-a-297c4d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-29T18:45:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"617c196d-4abf-40bb-9548-51696d3ea4ea","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T18:45:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"617c196d-4abf-40bb-9548-51696d3ea4ea","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T18:45:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b50385c7-7066-4454-85ff-a993dad5ca11","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41710","PortSpecifier":{"PortValue":41710}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b50385c7-7066-4454-85ff-a993dad5ca11","method":"POST","path":"/ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d/v1/completions","host":"e2e-shared-a-297c4d.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T18:45:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b50385c7-7066-4454-85ff-a993dad5ca11","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41710","PortSpecifier":{"PortValue":41710}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785350745,"nanos":490471145},"http":{"id":"b50385c7-7066-4454-85ff-a993dad5ca11","method":"POST","headers":{":authority":"e2e-shared-a-297c4d.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T18:45:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b50385c7-7066-4454-85ff-a993dad5ca11","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6T209SQKTglDFQZZ_iUUg3pMW2f1HXvUJP297aXTggyTwRcWf09yfj82AZgd"} {"level":"debug","ts":"2026-07-29T18:45:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b50385c7-7066-4454-85ff-a993dad5ca11","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-297c4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6T209SQKTglDFQZZ_iUUg3pMW2f1HXvUJP297aXTggyTwRcWf09yfj82AZgd\"}"} {"level":"debug","ts":"2026-07-29T18:45:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b50385c7-7066-4454-85ff-a993dad5ca11","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-297c4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3e81bb34-6f42-4c25-8775-f01aac06823b","keyName":"e2e-rate-a-447727","subscription":"e2e-rate-iso-a-447727","tenant":"e2e-shared-a-297c4d","userId":"3e81bb34-6f42-4c25-8775-f01aac06823b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-29T18:45:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b50385c7-7066-4454-85ff-a993dad5ca11","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-297c4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d\",\"requestedSubscription\":\"e2e-rate-iso-a-447727\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-29T18:45:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b50385c7-7066-4454-85ff-a993dad5ca11","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-297c4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-297c4d/models/facebook/opt-125m","name":"rate-test-model-297c4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-447727","namespace":"ai-tenant-e2e-shared-a-297c4d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d"}} {"level":"debug","ts":"2026-07-29T18:45:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b50385c7-7066-4454-85ff-a993dad5ca11","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T18:45:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b50385c7-7066-4454-85ff-a993dad5ca11","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:45:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b50385c7-7066-4454-85ff-a993dad5ca11","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:45:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b50385c7-7066-4454-85ff-a993dad5ca11","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-297c4d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:45:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b50385c7-7066-4454-85ff-a993dad5ca11","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:45:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b50385c7-7066-4454-85ff-a993dad5ca11","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-447727"} {"level":"debug","ts":"2026-07-29T18:45:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b50385c7-7066-4454-85ff-a993dad5ca11","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T18:45:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b50385c7-7066-4454-85ff-a993dad5ca11","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-29T18:45:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b50385c7-7066-4454-85ff-a993dad5ca11","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3e81bb34-6f42-4c25-8775-f01aac06823b","keyName":"e2e-rate-a-447727","selected_subscription":"e2e-rate-iso-a-447727","selected_subscription_key":"ai-tenant-e2e-shared-a-297c4d/e2e-rate-iso-a-447727@ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-297c4d/models/facebook/opt-125m","name":"rate-test-model-297c4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-447727","namespace":"ai-tenant-e2e-shared-a-297c4d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-29T18:45:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b50385c7-7066-4454-85ff-a993dad5ca11","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T18:45:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b50385c7-7066-4454-85ff-a993dad5ca11","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T18:45:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"171478e0-1ccc-4177-aebb-1a040992872c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41714","PortSpecifier":{"PortValue":41714}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"171478e0-1ccc-4177-aebb-1a040992872c","method":"POST","path":"/ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d/v1/completions","host":"e2e-shared-a-297c4d.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T18:45:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"171478e0-1ccc-4177-aebb-1a040992872c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41714","PortSpecifier":{"PortValue":41714}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785350746,"nanos":524705441},"http":{"id":"171478e0-1ccc-4177-aebb-1a040992872c","method":"POST","headers":{":authority":"e2e-shared-a-297c4d.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T18:45:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"171478e0-1ccc-4177-aebb-1a040992872c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6T209SQKTglDFQZZ_iUUg3pMW2f1HXvUJP297aXTggyTwRcWf09yfj82AZgd"} {"level":"debug","ts":"2026-07-29T18:45:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"171478e0-1ccc-4177-aebb-1a040992872c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-297c4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6T209SQKTglDFQZZ_iUUg3pMW2f1HXvUJP297aXTggyTwRcWf09yfj82AZgd\"}"} {"level":"debug","ts":"2026-07-29T18:45:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"171478e0-1ccc-4177-aebb-1a040992872c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-297c4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3e81bb34-6f42-4c25-8775-f01aac06823b","keyName":"e2e-rate-a-447727","subscription":"e2e-rate-iso-a-447727","tenant":"e2e-shared-a-297c4d","userId":"3e81bb34-6f42-4c25-8775-f01aac06823b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-29T18:45:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"171478e0-1ccc-4177-aebb-1a040992872c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-297c4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d\",\"requestedSubscription\":\"e2e-rate-iso-a-447727\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-29T18:45:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"171478e0-1ccc-4177-aebb-1a040992872c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-297c4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-297c4d/models/facebook/opt-125m","name":"rate-test-model-297c4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-447727","namespace":"ai-tenant-e2e-shared-a-297c4d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d"}} {"level":"debug","ts":"2026-07-29T18:45:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"171478e0-1ccc-4177-aebb-1a040992872c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T18:45:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"171478e0-1ccc-4177-aebb-1a040992872c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:45:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"171478e0-1ccc-4177-aebb-1a040992872c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:45:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"171478e0-1ccc-4177-aebb-1a040992872c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:45:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"171478e0-1ccc-4177-aebb-1a040992872c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-297c4d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:45:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"171478e0-1ccc-4177-aebb-1a040992872c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-447727"} {"level":"debug","ts":"2026-07-29T18:45:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"171478e0-1ccc-4177-aebb-1a040992872c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-29T18:45:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"171478e0-1ccc-4177-aebb-1a040992872c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T18:45:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"171478e0-1ccc-4177-aebb-1a040992872c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3e81bb34-6f42-4c25-8775-f01aac06823b","keyName":"e2e-rate-a-447727","selected_subscription":"e2e-rate-iso-a-447727","selected_subscription_key":"ai-tenant-e2e-shared-a-297c4d/e2e-rate-iso-a-447727@ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-297c4d/models/facebook/opt-125m","name":"rate-test-model-297c4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-447727","namespace":"ai-tenant-e2e-shared-a-297c4d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-29T18:45:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"171478e0-1ccc-4177-aebb-1a040992872c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T18:45:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"171478e0-1ccc-4177-aebb-1a040992872c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T18:45:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff414b37-35cf-4164-968c-aae1af50e614","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41720","PortSpecifier":{"PortValue":41720}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ff414b37-35cf-4164-968c-aae1af50e614","method":"POST","path":"/ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d/v1/completions","host":"e2e-shared-a-297c4d.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T18:45:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff414b37-35cf-4164-968c-aae1af50e614","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41720","PortSpecifier":{"PortValue":41720}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785350747,"nanos":558925632},"http":{"id":"ff414b37-35cf-4164-968c-aae1af50e614","method":"POST","headers":{":authority":"e2e-shared-a-297c4d.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T18:45:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ff414b37-35cf-4164-968c-aae1af50e614","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6T209SQKTglDFQZZ_iUUg3pMW2f1HXvUJP297aXTggyTwRcWf09yfj82AZgd"} {"level":"debug","ts":"2026-07-29T18:45:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ff414b37-35cf-4164-968c-aae1af50e614","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-297c4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6T209SQKTglDFQZZ_iUUg3pMW2f1HXvUJP297aXTggyTwRcWf09yfj82AZgd\"}"} {"level":"debug","ts":"2026-07-29T18:45:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ff414b37-35cf-4164-968c-aae1af50e614","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-297c4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3e81bb34-6f42-4c25-8775-f01aac06823b","keyName":"e2e-rate-a-447727","subscription":"e2e-rate-iso-a-447727","tenant":"e2e-shared-a-297c4d","userId":"3e81bb34-6f42-4c25-8775-f01aac06823b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-29T18:45:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ff414b37-35cf-4164-968c-aae1af50e614","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-297c4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d\",\"requestedSubscription\":\"e2e-rate-iso-a-447727\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-29T18:45:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ff414b37-35cf-4164-968c-aae1af50e614","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-297c4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-297c4d/models/facebook/opt-125m","name":"rate-test-model-297c4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-447727","namespace":"ai-tenant-e2e-shared-a-297c4d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d"}} {"level":"debug","ts":"2026-07-29T18:45:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ff414b37-35cf-4164-968c-aae1af50e614","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T18:45:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff414b37-35cf-4164-968c-aae1af50e614","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:45:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff414b37-35cf-4164-968c-aae1af50e614","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:45:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff414b37-35cf-4164-968c-aae1af50e614","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-297c4d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:45:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff414b37-35cf-4164-968c-aae1af50e614","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:45:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff414b37-35cf-4164-968c-aae1af50e614","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T18:45:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff414b37-35cf-4164-968c-aae1af50e614","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-447727"} {"level":"debug","ts":"2026-07-29T18:45:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff414b37-35cf-4164-968c-aae1af50e614","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-29T18:45:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff414b37-35cf-4164-968c-aae1af50e614","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3e81bb34-6f42-4c25-8775-f01aac06823b","keyName":"e2e-rate-a-447727","selected_subscription":"e2e-rate-iso-a-447727","selected_subscription_key":"ai-tenant-e2e-shared-a-297c4d/e2e-rate-iso-a-447727@ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-297c4d/models/facebook/opt-125m","name":"rate-test-model-297c4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-447727","namespace":"ai-tenant-e2e-shared-a-297c4d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-29T18:45:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff414b37-35cf-4164-968c-aae1af50e614","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T18:45:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff414b37-35cf-4164-968c-aae1af50e614","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T18:45:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c383961b-f5f8-4e0c-b5cc-17459fee2e80","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41732","PortSpecifier":{"PortValue":41732}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c383961b-f5f8-4e0c-b5cc-17459fee2e80","method":"POST","path":"/ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d/v1/completions","host":"e2e-shared-a-297c4d.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T18:45:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c383961b-f5f8-4e0c-b5cc-17459fee2e80","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41732","PortSpecifier":{"PortValue":41732}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785350748,"nanos":593456189},"http":{"id":"c383961b-f5f8-4e0c-b5cc-17459fee2e80","method":"POST","headers":{":authority":"e2e-shared-a-297c4d.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T18:45:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c383961b-f5f8-4e0c-b5cc-17459fee2e80","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6T209SQKTglDFQZZ_iUUg3pMW2f1HXvUJP297aXTggyTwRcWf09yfj82AZgd"} {"level":"debug","ts":"2026-07-29T18:45:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c383961b-f5f8-4e0c-b5cc-17459fee2e80","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-297c4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6T209SQKTglDFQZZ_iUUg3pMW2f1HXvUJP297aXTggyTwRcWf09yfj82AZgd\"}"} {"level":"debug","ts":"2026-07-29T18:45:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c383961b-f5f8-4e0c-b5cc-17459fee2e80","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-297c4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3e81bb34-6f42-4c25-8775-f01aac06823b","keyName":"e2e-rate-a-447727","subscription":"e2e-rate-iso-a-447727","tenant":"e2e-shared-a-297c4d","userId":"3e81bb34-6f42-4c25-8775-f01aac06823b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-29T18:45:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c383961b-f5f8-4e0c-b5cc-17459fee2e80","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-297c4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d\",\"requestedSubscription\":\"e2e-rate-iso-a-447727\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-29T18:45:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c383961b-f5f8-4e0c-b5cc-17459fee2e80","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-297c4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-297c4d/models/facebook/opt-125m","name":"rate-test-model-297c4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-447727","namespace":"ai-tenant-e2e-shared-a-297c4d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d"}} {"level":"debug","ts":"2026-07-29T18:45:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c383961b-f5f8-4e0c-b5cc-17459fee2e80","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T18:45:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c383961b-f5f8-4e0c-b5cc-17459fee2e80","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:45:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c383961b-f5f8-4e0c-b5cc-17459fee2e80","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:45:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c383961b-f5f8-4e0c-b5cc-17459fee2e80","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:45:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c383961b-f5f8-4e0c-b5cc-17459fee2e80","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-297c4d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:45:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c383961b-f5f8-4e0c-b5cc-17459fee2e80","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T18:45:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c383961b-f5f8-4e0c-b5cc-17459fee2e80","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-447727"} {"level":"debug","ts":"2026-07-29T18:45:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c383961b-f5f8-4e0c-b5cc-17459fee2e80","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-29T18:45:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c383961b-f5f8-4e0c-b5cc-17459fee2e80","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3e81bb34-6f42-4c25-8775-f01aac06823b","keyName":"e2e-rate-a-447727","selected_subscription":"e2e-rate-iso-a-447727","selected_subscription_key":"ai-tenant-e2e-shared-a-297c4d/e2e-rate-iso-a-447727@ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-297c4d/models/facebook/opt-125m","name":"rate-test-model-297c4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-447727","namespace":"ai-tenant-e2e-shared-a-297c4d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-29T18:45:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c383961b-f5f8-4e0c-b5cc-17459fee2e80","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T18:45:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c383961b-f5f8-4e0c-b5cc-17459fee2e80","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T18:45:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6d8ba741-2581-4a87-bf53-1040dbc0f11e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41744","PortSpecifier":{"PortValue":41744}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6d8ba741-2581-4a87-bf53-1040dbc0f11e","method":"POST","path":"/ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d/v1/completions","host":"e2e-shared-a-297c4d.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T18:45:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6d8ba741-2581-4a87-bf53-1040dbc0f11e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41744","PortSpecifier":{"PortValue":41744}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785350749,"nanos":631096447},"http":{"id":"6d8ba741-2581-4a87-bf53-1040dbc0f11e","method":"POST","headers":{":authority":"e2e-shared-a-297c4d.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T18:45:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6d8ba741-2581-4a87-bf53-1040dbc0f11e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6T209SQKTglDFQZZ_iUUg3pMW2f1HXvUJP297aXTggyTwRcWf09yfj82AZgd"} {"level":"debug","ts":"2026-07-29T18:45:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6d8ba741-2581-4a87-bf53-1040dbc0f11e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-297c4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6T209SQKTglDFQZZ_iUUg3pMW2f1HXvUJP297aXTggyTwRcWf09yfj82AZgd\"}"} {"level":"debug","ts":"2026-07-29T18:45:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6d8ba741-2581-4a87-bf53-1040dbc0f11e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-297c4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3e81bb34-6f42-4c25-8775-f01aac06823b","keyName":"e2e-rate-a-447727","subscription":"e2e-rate-iso-a-447727","tenant":"e2e-shared-a-297c4d","userId":"3e81bb34-6f42-4c25-8775-f01aac06823b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-29T18:45:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6d8ba741-2581-4a87-bf53-1040dbc0f11e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-297c4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d\",\"requestedSubscription\":\"e2e-rate-iso-a-447727\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-29T18:45:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6d8ba741-2581-4a87-bf53-1040dbc0f11e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-297c4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-297c4d/models/facebook/opt-125m","name":"rate-test-model-297c4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-447727","namespace":"ai-tenant-e2e-shared-a-297c4d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d"}} {"level":"debug","ts":"2026-07-29T18:45:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6d8ba741-2581-4a87-bf53-1040dbc0f11e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T18:45:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d8ba741-2581-4a87-bf53-1040dbc0f11e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:45:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d8ba741-2581-4a87-bf53-1040dbc0f11e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:45:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d8ba741-2581-4a87-bf53-1040dbc0f11e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:45:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d8ba741-2581-4a87-bf53-1040dbc0f11e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-297c4d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:45:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d8ba741-2581-4a87-bf53-1040dbc0f11e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-29T18:45:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d8ba741-2581-4a87-bf53-1040dbc0f11e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T18:45:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d8ba741-2581-4a87-bf53-1040dbc0f11e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-447727"} {"level":"debug","ts":"2026-07-29T18:45:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d8ba741-2581-4a87-bf53-1040dbc0f11e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3e81bb34-6f42-4c25-8775-f01aac06823b","keyName":"e2e-rate-a-447727","selected_subscription":"e2e-rate-iso-a-447727","selected_subscription_key":"ai-tenant-e2e-shared-a-297c4d/e2e-rate-iso-a-447727@ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-297c4d/models/facebook/opt-125m","name":"rate-test-model-297c4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-447727","namespace":"ai-tenant-e2e-shared-a-297c4d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-29T18:45:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6d8ba741-2581-4a87-bf53-1040dbc0f11e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T18:45:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6d8ba741-2581-4a87-bf53-1040dbc0f11e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T18:45:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f298ba6c-76c6-432e-881e-246d317feee9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39468","PortSpecifier":{"PortValue":39468}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f298ba6c-76c6-432e-881e-246d317feee9","method":"POST","path":"/ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d/v1/completions","host":"e2e-shared-a-297c4d.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T18:45:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f298ba6c-76c6-432e-881e-246d317feee9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39468","PortSpecifier":{"PortValue":39468}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785350750,"nanos":667380600},"http":{"id":"f298ba6c-76c6-432e-881e-246d317feee9","method":"POST","headers":{":authority":"e2e-shared-a-297c4d.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T18:45:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f298ba6c-76c6-432e-881e-246d317feee9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6T209SQKTglDFQZZ_iUUg3pMW2f1HXvUJP297aXTggyTwRcWf09yfj82AZgd"} {"level":"debug","ts":"2026-07-29T18:45:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f298ba6c-76c6-432e-881e-246d317feee9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-297c4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6T209SQKTglDFQZZ_iUUg3pMW2f1HXvUJP297aXTggyTwRcWf09yfj82AZgd\"}"} {"level":"debug","ts":"2026-07-29T18:45:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f298ba6c-76c6-432e-881e-246d317feee9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-297c4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3e81bb34-6f42-4c25-8775-f01aac06823b","keyName":"e2e-rate-a-447727","subscription":"e2e-rate-iso-a-447727","tenant":"e2e-shared-a-297c4d","userId":"3e81bb34-6f42-4c25-8775-f01aac06823b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-29T18:45:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f298ba6c-76c6-432e-881e-246d317feee9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-297c4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d\",\"requestedSubscription\":\"e2e-rate-iso-a-447727\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-29T18:45:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f298ba6c-76c6-432e-881e-246d317feee9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-297c4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-297c4d/models/facebook/opt-125m","name":"rate-test-model-297c4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-447727","namespace":"ai-tenant-e2e-shared-a-297c4d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d"}} {"level":"debug","ts":"2026-07-29T18:45:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f298ba6c-76c6-432e-881e-246d317feee9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T18:45:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f298ba6c-76c6-432e-881e-246d317feee9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:45:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f298ba6c-76c6-432e-881e-246d317feee9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:45:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f298ba6c-76c6-432e-881e-246d317feee9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:45:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f298ba6c-76c6-432e-881e-246d317feee9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-297c4d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:45:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f298ba6c-76c6-432e-881e-246d317feee9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T18:45:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f298ba6c-76c6-432e-881e-246d317feee9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-447727"} {"level":"debug","ts":"2026-07-29T18:45:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f298ba6c-76c6-432e-881e-246d317feee9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-29T18:45:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f298ba6c-76c6-432e-881e-246d317feee9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3e81bb34-6f42-4c25-8775-f01aac06823b","keyName":"e2e-rate-a-447727","selected_subscription":"e2e-rate-iso-a-447727","selected_subscription_key":"ai-tenant-e2e-shared-a-297c4d/e2e-rate-iso-a-447727@ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-297c4d/models/facebook/opt-125m","name":"rate-test-model-297c4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-447727","namespace":"ai-tenant-e2e-shared-a-297c4d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-29T18:45:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f298ba6c-76c6-432e-881e-246d317feee9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T18:45:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f298ba6c-76c6-432e-881e-246d317feee9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T18:45:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8b585875-cb92-4be5-b1a5-344c059aaba9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39474","PortSpecifier":{"PortValue":39474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8b585875-cb92-4be5-b1a5-344c059aaba9","method":"POST","path":"/ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d/v1/completions","host":"e2e-shared-a-297c4d.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T18:45:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8b585875-cb92-4be5-b1a5-344c059aaba9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39474","PortSpecifier":{"PortValue":39474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785350751,"nanos":705119542},"http":{"id":"8b585875-cb92-4be5-b1a5-344c059aaba9","method":"POST","headers":{":authority":"e2e-shared-a-297c4d.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T18:45:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8b585875-cb92-4be5-b1a5-344c059aaba9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6T209SQKTglDFQZZ_iUUg3pMW2f1HXvUJP297aXTggyTwRcWf09yfj82AZgd"} {"level":"debug","ts":"2026-07-29T18:45:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8b585875-cb92-4be5-b1a5-344c059aaba9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-297c4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6T209SQKTglDFQZZ_iUUg3pMW2f1HXvUJP297aXTggyTwRcWf09yfj82AZgd\"}"} {"level":"debug","ts":"2026-07-29T18:45:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8b585875-cb92-4be5-b1a5-344c059aaba9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-297c4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3e81bb34-6f42-4c25-8775-f01aac06823b","keyName":"e2e-rate-a-447727","subscription":"e2e-rate-iso-a-447727","tenant":"e2e-shared-a-297c4d","userId":"3e81bb34-6f42-4c25-8775-f01aac06823b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-29T18:45:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8b585875-cb92-4be5-b1a5-344c059aaba9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-297c4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d\",\"requestedSubscription\":\"e2e-rate-iso-a-447727\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-29T18:45:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8b585875-cb92-4be5-b1a5-344c059aaba9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-297c4d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-297c4d/models/facebook/opt-125m","name":"rate-test-model-297c4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-447727","namespace":"ai-tenant-e2e-shared-a-297c4d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d"}} {"level":"debug","ts":"2026-07-29T18:45:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8b585875-cb92-4be5-b1a5-344c059aaba9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T18:45:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b585875-cb92-4be5-b1a5-344c059aaba9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:45:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b585875-cb92-4be5-b1a5-344c059aaba9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:45:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b585875-cb92-4be5-b1a5-344c059aaba9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-297c4d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:45:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b585875-cb92-4be5-b1a5-344c059aaba9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:45:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b585875-cb92-4be5-b1a5-344c059aaba9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T18:45:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b585875-cb92-4be5-b1a5-344c059aaba9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-447727"} {"level":"debug","ts":"2026-07-29T18:45:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b585875-cb92-4be5-b1a5-344c059aaba9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-29T18:45:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b585875-cb92-4be5-b1a5-344c059aaba9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3e81bb34-6f42-4c25-8775-f01aac06823b","keyName":"e2e-rate-a-447727","selected_subscription":"e2e-rate-iso-a-447727","selected_subscription_key":"ai-tenant-e2e-shared-a-297c4d/e2e-rate-iso-a-447727@ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-297c4d/models/facebook/opt-125m","name":"rate-test-model-297c4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-447727","namespace":"ai-tenant-e2e-shared-a-297c4d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-297c4d/rate-test-model-297c4d"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-29T18:45:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8b585875-cb92-4be5-b1a5-344c059aaba9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T18:45:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8b585875-cb92-4be5-b1a5-344c059aaba9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T18:45:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bc5469a6-fc29-430e-9a04-afdc35752d6d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:58198","PortSpecifier":{"PortValue":58198}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bc5469a6-fc29-430e-9a04-afdc35752d6d","method":"POST","path":"/ai-tenant-e2e-shared-b-f9520e/rate-test-model-f9520e/v1/completions","host":"e2e-shared-b-f9520e.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T18:45:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bc5469a6-fc29-430e-9a04-afdc35752d6d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:58198","PortSpecifier":{"PortValue":58198}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785350751,"nanos":741726347},"http":{"id":"bc5469a6-fc29-430e-9a04-afdc35752d6d","method":"POST","headers":{":authority":"e2e-shared-b-f9520e.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-f9520e/rate-test-model-f9520e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T18:45:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bc5469a6-fc29-430e-9a04-afdc35752d6d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-81mI4wVer8ILq9Fc_PG6tF0FRsFfL7f5kt3HJsLOt3I62wfIkYDyFHB14JvH"} {"level":"debug","ts":"2026-07-29T18:45:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bc5469a6-fc29-430e-9a04-afdc35752d6d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-f9520e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-81mI4wVer8ILq9Fc_PG6tF0FRsFfL7f5kt3HJsLOt3I62wfIkYDyFHB14JvH\"}"} {"level":"debug","ts":"2026-07-29T18:45:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bc5469a6-fc29-430e-9a04-afdc35752d6d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f9520e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5d72c4b6-49dd-4a2e-a5bf-6f89096e4f95","keyName":"e2e-rate-b-447727","subscription":"e2e-rate-iso-b-447727","tenant":"e2e-shared-b-f9520e","userId":"5d72c4b6-49dd-4a2e-a5bf-6f89096e4f95","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-29T18:45:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bc5469a6-fc29-430e-9a04-afdc35752d6d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-f9520e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-f9520e/rate-test-model-f9520e\",\"requestedSubscription\":\"e2e-rate-iso-b-447727\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-29T18:45:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bc5469a6-fc29-430e-9a04-afdc35752d6d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f9520e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-f9520e/models/facebook/opt-125m","name":"rate-test-model-f9520e","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-447727","namespace":"ai-tenant-e2e-shared-b-f9520e","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-f9520e/rate-test-model-f9520e"}} {"level":"debug","ts":"2026-07-29T18:45:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bc5469a6-fc29-430e-9a04-afdc35752d6d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T18:45:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc5469a6-fc29-430e-9a04-afdc35752d6d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:45:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc5469a6-fc29-430e-9a04-afdc35752d6d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:45:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc5469a6-fc29-430e-9a04-afdc35752d6d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:45:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc5469a6-fc29-430e-9a04-afdc35752d6d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f9520e/rate-test-model-f9520e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f9520e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:45:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bc5469a6-fc29-430e-9a04-afdc35752d6d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-447727"} {"level":"debug","ts":"2026-07-29T18:45:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bc5469a6-fc29-430e-9a04-afdc35752d6d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T18:45:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bc5469a6-fc29-430e-9a04-afdc35752d6d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-29T18:45:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bc5469a6-fc29-430e-9a04-afdc35752d6d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5d72c4b6-49dd-4a2e-a5bf-6f89096e4f95","keyName":"e2e-rate-b-447727","selected_subscription":"e2e-rate-iso-b-447727","selected_subscription_key":"ai-tenant-e2e-shared-b-f9520e/e2e-rate-iso-b-447727@ai-tenant-e2e-shared-b-f9520e/rate-test-model-f9520e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-f9520e/models/facebook/opt-125m","name":"rate-test-model-f9520e","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-447727","namespace":"ai-tenant-e2e-shared-b-f9520e","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-f9520e/rate-test-model-f9520e"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-29T18:45:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bc5469a6-fc29-430e-9a04-afdc35752d6d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T18:45:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bc5469a6-fc29-430e-9a04-afdc35752d6d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T18:45:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/10d136424db654ae93d966e75d946df6c388f8c7964840c449af0e20f3b720ce"} {"level":"info","ts":"2026-07-29T18:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2f63b7a7d70d7d457d01bfeefbb7696d195d06d4062c66b2d46510bf3fa1726d"} {"level":"info","ts":"2026-07-29T18:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/05b5c78981649d7238f8a7c2677d7a24c2f9a827c733e3325da7f0ce3deceee1"} {"level":"info","ts":"2026-07-29T18:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/30f760de95a7f72fcb6fe5da8ac8e6865bd51eeaaddf5cfdc9f1aab46a3e2e99"} {"level":"info","ts":"2026-07-29T18:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0f545e3ca1fa17139a149f2b64d745c040de12ceb7c06715db720d9c5f7900db"} {"level":"info","ts":"2026-07-29T18:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0a729d64313292f1c304b109e5afed4706e80f40600b3f20aa6f2ee577f14c4e"} {"level":"info","ts":"2026-07-29T18:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/43328102117029f2edf2d5d14ee619089d94ed931b31abcbb18107a1cb59a040"} {"level":"info","ts":"2026-07-29T18:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/45f37d7b63ea815e95132aa1b10f62ca808206f89e0e49364781365ab3743f2b"} {"level":"info","ts":"2026-07-29T18:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/48b6b8f3b208855e00860b6dc66f971b1e1e5987af90ce8e7c0f6a1ac493a00c"} {"level":"info","ts":"2026-07-29T18:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0a45c4a268f18be94047528c4760402c4b80541952abbe0cf87c3f8257cecc94"} {"level":"info","ts":"2026-07-29T18:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/de1148cdc83c21f965a5c6e3ca14fc1090fa05506625cfc114de9e48c7f9fd53"} {"level":"info","ts":"2026-07-29T18:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/14389ec2f0d777eece3fbc147691f9b4bcdf5a12f3e97e7083265e6291ec3143"} {"level":"info","ts":"2026-07-29T18:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/33723cf06fd4b00f9b92c4c2791f737e8ddc3587a52f7390714bbec47f72c03a"} {"level":"info","ts":"2026-07-29T18:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0addac64f96203e2fce5318a894ed580676450fab7ba5a3dbc555b85b8999d5b"} {"level":"info","ts":"2026-07-29T18:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5f2bd57884ae9235a468a31eb8b25e86f0434f9c34bfacf26cd767230e186697"} {"level":"info","ts":"2026-07-29T18:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c395ab0e8d70e8b9556fd5292af3b7f9efefa61a624412d8283b84c38c051a52"} {"level":"info","ts":"2026-07-29T18:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/82a5dcde8914be0b3997520d860c14c88014fb8eff91f8f5cec842a9dd552434"} {"level":"info","ts":"2026-07-29T18:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/63cd5a49bf130a772b3fa171ee6ca324b428a492a687f96583e85d9e9c023172"} {"level":"info","ts":"2026-07-29T18:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7917c29f12b01824cb9e894aedb318810880c38acffdbf5055ab7869f545c78e"} {"level":"info","ts":"2026-07-29T18:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a8a000d29c2a852cfcafa3a960ebfd341604d9973f28989d4878c4ce6c52a7d2"} {"level":"info","ts":"2026-07-29T18:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3a23e4d6a211005b92dce6fc2ddd6a9a4829fe54e41205fdbbf6f9dd7ca368dc"} {"level":"info","ts":"2026-07-29T18:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4c568eea772bdb57e6bb6ca671ef5c2fe6e20f66b02cc37007fdff87b5a4d066"} {"level":"info","ts":"2026-07-29T18:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fe774f424e53cf8ad5bfa4e83dd4cc7110a408e5bdbfb3dc80aa07496bae6de9"} {"level":"info","ts":"2026-07-29T18:45:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/21ba5bac51df8ff953c661d298aae6c4628b36759c1ad6993ef2b991e8463b3f"} {"level":"info","ts":"2026-07-29T18:47:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"755cba5b-00b2-4bd6-a4f2-a43570692943","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40084","PortSpecifier":{"PortValue":40084}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"755cba5b-00b2-4bd6-a4f2-a43570692943","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T18:47:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"755cba5b-00b2-4bd6-a4f2-a43570692943","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40084","PortSpecifier":{"PortValue":40084}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785350834,"nanos":858257867},"http":{"id":"755cba5b-00b2-4bd6-a4f2-a43570692943","method":"POST","headers":{":authority":"maas.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T18:47:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"755cba5b-00b2-4bd6-a4f2-a43570692943","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-29T18:47:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"755cba5b-00b2-4bd6-a4f2-a43570692943","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8e218b41-a126-4bf8-ae17-9a90356caab5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=178173f8-337c-4e3f-884b-fd9042aa046c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/31eca5b07dec"]}} {"level":"debug","ts":"2026-07-29T18:47:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"755cba5b-00b2-4bd6-a4f2-a43570692943","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/31eca5b07dec"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=178173f8-337c-4e3f-884b-fd9042aa046c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8e218b41-a126-4bf8-ae17-9a90356caab5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T18:47:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"755cba5b-00b2-4bd6-a4f2-a43570692943","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:47:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"755cba5b-00b2-4bd6-a4f2-a43570692943","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:47:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"755cba5b-00b2-4bd6-a4f2-a43570692943","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:47:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"755cba5b-00b2-4bd6-a4f2-a43570692943","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-29T18:47:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"755cba5b-00b2-4bd6-a4f2-a43570692943","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T18:47:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"755cba5b-00b2-4bd6-a4f2-a43570692943","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-29T18:47:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"755cba5b-00b2-4bd6-a4f2-a43570692943","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T18:47:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"755cba5b-00b2-4bd6-a4f2-a43570692943","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T18:47:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b728909f-4b91-4992-9706-a3dc2f939fb2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40086","PortSpecifier":{"PortValue":40086}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b728909f-4b91-4992-9706-a3dc2f939fb2","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T18:47:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b728909f-4b91-4992-9706-a3dc2f939fb2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40086","PortSpecifier":{"PortValue":40086}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785350834,"nanos":899207176},"http":{"id":"b728909f-4b91-4992-9706-a3dc2f939fb2","method":"POST","headers":{":authority":"maas.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T18:47:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b728909f-4b91-4992-9706-a3dc2f939fb2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1HUjniCfBnW089RAq_XyHKPdQeRjutAmk2ufNY2JXLB51OvajlHVdgrWdd58S"} {"level":"debug","ts":"2026-07-29T18:47:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b728909f-4b91-4992-9706-a3dc2f939fb2","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1HUjniCfBnW089RAq_XyHKPdQeRjutAmk2ufNY2JXLB51OvajlHVdgrWdd58S\"}"} {"level":"debug","ts":"2026-07-29T18:47:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b728909f-4b91-4992-9706-a3dc2f939fb2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d344bdc5-f5c9-40a9-9074-0726784a4020","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"d344bdc5-f5c9-40a9-9074-0726784a4020","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-29T18:47:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b728909f-4b91-4992-9706-a3dc2f939fb2","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-29T18:47:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b728909f-4b91-4992-9706-a3dc2f939fb2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}} {"level":"debug","ts":"2026-07-29T18:47:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b728909f-4b91-4992-9706-a3dc2f939fb2","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T18:47:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b728909f-4b91-4992-9706-a3dc2f939fb2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:47:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b728909f-4b91-4992-9706-a3dc2f939fb2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:47:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b728909f-4b91-4992-9706-a3dc2f939fb2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:47:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b728909f-4b91-4992-9706-a3dc2f939fb2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:47:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b728909f-4b91-4992-9706-a3dc2f939fb2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T18:47:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b728909f-4b91-4992-9706-a3dc2f939fb2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-29T18:47:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b728909f-4b91-4992-9706-a3dc2f939fb2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-07-29T18:47:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b728909f-4b91-4992-9706-a3dc2f939fb2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d344bdc5-f5c9-40a9-9074-0726784a4020","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-29T18:47:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b728909f-4b91-4992-9706-a3dc2f939fb2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T18:47:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b728909f-4b91-4992-9706-a3dc2f939fb2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"121702789baf5bf8936e619d59c3adb401ba9969991d113ea73d127e66bb6261","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:47:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:47:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"121702789baf5bf8936e619d59c3adb401ba9969991d113ea73d127e66bb6261","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"121702789baf5bf8936e619d59c3adb401ba9969991d113ea73d127e66bb6261","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"121702789baf5bf8936e619d59c3adb401ba9969991d113ea73d127e66bb6261","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/121702789baf5bf8936e619d59c3adb401ba9969991d113ea73d127e66bb6261"} {"level":"debug","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"121702789baf5bf8936e619d59c3adb401ba9969991d113ea73d127e66bb6261","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/121702789baf5bf8936e619d59c3adb401ba9969991d113ea73d127e66bb6261"} {"level":"debug","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"121702789baf5bf8936e619d59c3adb401ba9969991d113ea73d127e66bb6261","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:47:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:47:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["121702789baf5bf8936e619d59c3adb401ba9969991d113ea73d127e66bb6261"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"121702789baf5bf8936e619d59c3adb401ba9969991d113ea73d127e66bb6261","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e644fbd3cba7560dd515749ddb0f025a044fd52af923e2102f25387b05dd986","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:47:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:47:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e644fbd3cba7560dd515749ddb0f025a044fd52af923e2102f25387b05dd986","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"121702789baf5bf8936e619d59c3adb401ba9969991d113ea73d127e66bb6261","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e644fbd3cba7560dd515749ddb0f025a044fd52af923e2102f25387b05dd986","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e644fbd3cba7560dd515749ddb0f025a044fd52af923e2102f25387b05dd986","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e644fbd3cba7560dd515749ddb0f025a044fd52af923e2102f25387b05dd986"} {"level":"debug","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e644fbd3cba7560dd515749ddb0f025a044fd52af923e2102f25387b05dd986","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:47:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:47:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e644fbd3cba7560dd515749ddb0f025a044fd52af923e2102f25387b05dd986"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/121702789baf5bf8936e619d59c3adb401ba9969991d113ea73d127e66bb6261"} {"level":"info","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e644fbd3cba7560dd515749ddb0f025a044fd52af923e2102f25387b05dd986","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e644fbd3cba7560dd515749ddb0f025a044fd52af923e2102f25387b05dd986","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:47:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:47:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e644fbd3cba7560dd515749ddb0f025a044fd52af923e2102f25387b05dd986"} {"level":"info","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e644fbd3cba7560dd515749ddb0f025a044fd52af923e2102f25387b05dd986","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e644fbd3cba7560dd515749ddb0f025a044fd52af923e2102f25387b05dd986","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e644fbd3cba7560dd515749ddb0f025a044fd52af923e2102f25387b05dd986","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4553f6be9a68aa372d0fc42edd572ea78f3837b5259036616195e5bcd52a207f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:47:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:47:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e644fbd3cba7560dd515749ddb0f025a044fd52af923e2102f25387b05dd986"} {"level":"info","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4553f6be9a68aa372d0fc42edd572ea78f3837b5259036616195e5bcd52a207f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e644fbd3cba7560dd515749ddb0f025a044fd52af923e2102f25387b05dd986","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:47:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:47:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e644fbd3cba7560dd515749ddb0f025a044fd52af923e2102f25387b05dd986"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4553f6be9a68aa372d0fc42edd572ea78f3837b5259036616195e5bcd52a207f"} {"level":"info","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e644fbd3cba7560dd515749ddb0f025a044fd52af923e2102f25387b05dd986","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4553f6be9a68aa372d0fc42edd572ea78f3837b5259036616195e5bcd52a207f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:47:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:47:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4553f6be9a68aa372d0fc42edd572ea78f3837b5259036616195e5bcd52a207f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e644fbd3cba7560dd515749ddb0f025a044fd52af923e2102f25387b05dd986"} {"level":"info","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4553f6be9a68aa372d0fc42edd572ea78f3837b5259036616195e5bcd52a207f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e644fbd3cba7560dd515749ddb0f025a044fd52af923e2102f25387b05dd986","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4553f6be9a68aa372d0fc42edd572ea78f3837b5259036616195e5bcd52a207f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:47:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:47:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4553f6be9a68aa372d0fc42edd572ea78f3837b5259036616195e5bcd52a207f"} {"level":"info","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4553f6be9a68aa372d0fc42edd572ea78f3837b5259036616195e5bcd52a207f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4553f6be9a68aa372d0fc42edd572ea78f3837b5259036616195e5bcd52a207f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:47:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:47:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4553f6be9a68aa372d0fc42edd572ea78f3837b5259036616195e5bcd52a207f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e644fbd3cba7560dd515749ddb0f025a044fd52af923e2102f25387b05dd986"} {"level":"info","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4553f6be9a68aa372d0fc42edd572ea78f3837b5259036616195e5bcd52a207f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4553f6be9a68aa372d0fc42edd572ea78f3837b5259036616195e5bcd52a207f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4553f6be9a68aa372d0fc42edd572ea78f3837b5259036616195e5bcd52a207f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:47:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:47:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4553f6be9a68aa372d0fc42edd572ea78f3837b5259036616195e5bcd52a207f"} {"level":"info","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4553f6be9a68aa372d0fc42edd572ea78f3837b5259036616195e5bcd52a207f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4553f6be9a68aa372d0fc42edd572ea78f3837b5259036616195e5bcd52a207f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:47:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:47:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4553f6be9a68aa372d0fc42edd572ea78f3837b5259036616195e5bcd52a207f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4553f6be9a68aa372d0fc42edd572ea78f3837b5259036616195e5bcd52a207f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4553f6be9a68aa372d0fc42edd572ea78f3837b5259036616195e5bcd52a207f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4553f6be9a68aa372d0fc42edd572ea78f3837b5259036616195e5bcd52a207f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4553f6be9a68aa372d0fc42edd572ea78f3837b5259036616195e5bcd52a207f"} {"level":"info","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4553f6be9a68aa372d0fc42edd572ea78f3837b5259036616195e5bcd52a207f"} {"level":"debug","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4553f6be9a68aa372d0fc42edd572ea78f3837b5259036616195e5bcd52a207f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:47:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:47:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4553f6be9a68aa372d0fc42edd572ea78f3837b5259036616195e5bcd52a207f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4553f6be9a68aa372d0fc42edd572ea78f3837b5259036616195e5bcd52a207f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4553f6be9a68aa372d0fc42edd572ea78f3837b5259036616195e5bcd52a207f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:47:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:47:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4553f6be9a68aa372d0fc42edd572ea78f3837b5259036616195e5bcd52a207f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4553f6be9a68aa372d0fc42edd572ea78f3837b5259036616195e5bcd52a207f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4553f6be9a68aa372d0fc42edd572ea78f3837b5259036616195e5bcd52a207f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4553f6be9a68aa372d0fc42edd572ea78f3837b5259036616195e5bcd52a207f"} {"level":"debug","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4553f6be9a68aa372d0fc42edd572ea78f3837b5259036616195e5bcd52a207f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4553f6be9a68aa372d0fc42edd572ea78f3837b5259036616195e5bcd52a207f"} {"level":"debug","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4553f6be9a68aa372d0fc42edd572ea78f3837b5259036616195e5bcd52a207f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:47:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:47:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4553f6be9a68aa372d0fc42edd572ea78f3837b5259036616195e5bcd52a207f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4553f6be9a68aa372d0fc42edd572ea78f3837b5259036616195e5bcd52a207f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b42705b225c8fbd387e17699b908907f43b5b5028dd6d99b674697c38f68d01f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:47:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:47:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b42705b225c8fbd387e17699b908907f43b5b5028dd6d99b674697c38f68d01f"} {"level":"info","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b42705b225c8fbd387e17699b908907f43b5b5028dd6d99b674697c38f68d01f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4553f6be9a68aa372d0fc42edd572ea78f3837b5259036616195e5bcd52a207f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:47:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:47:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4553f6be9a68aa372d0fc42edd572ea78f3837b5259036616195e5bcd52a207f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b42705b225c8fbd387e17699b908907f43b5b5028dd6d99b674697c38f68d01f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:47:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:47:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b42705b225c8fbd387e17699b908907f43b5b5028dd6d99b674697c38f68d01f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4553f6be9a68aa372d0fc42edd572ea78f3837b5259036616195e5bcd52a207f"} {"level":"info","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b42705b225c8fbd387e17699b908907f43b5b5028dd6d99b674697c38f68d01f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4553f6be9a68aa372d0fc42edd572ea78f3837b5259036616195e5bcd52a207f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:47:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:47:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4553f6be9a68aa372d0fc42edd572ea78f3837b5259036616195e5bcd52a207f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b42705b225c8fbd387e17699b908907f43b5b5028dd6d99b674697c38f68d01f"} {"level":"info","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4553f6be9a68aa372d0fc42edd572ea78f3837b5259036616195e5bcd52a207f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b42705b225c8fbd387e17699b908907f43b5b5028dd6d99b674697c38f68d01f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4553f6be9a68aa372d0fc42edd572ea78f3837b5259036616195e5bcd52a207f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:47:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:47:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4553f6be9a68aa372d0fc42edd572ea78f3837b5259036616195e5bcd52a207f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4553f6be9a68aa372d0fc42edd572ea78f3837b5259036616195e5bcd52a207f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4553f6be9a68aa372d0fc42edd572ea78f3837b5259036616195e5bcd52a207f"} {"level":"debug","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4553f6be9a68aa372d0fc42edd572ea78f3837b5259036616195e5bcd52a207f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:47:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:47:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4553f6be9a68aa372d0fc42edd572ea78f3837b5259036616195e5bcd52a207f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4553f6be9a68aa372d0fc42edd572ea78f3837b5259036616195e5bcd52a207f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4553f6be9a68aa372d0fc42edd572ea78f3837b5259036616195e5bcd52a207f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b42705b225c8fbd387e17699b908907f43b5b5028dd6d99b674697c38f68d01f"} {"level":"info","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4553f6be9a68aa372d0fc42edd572ea78f3837b5259036616195e5bcd52a207f"} {"level":"debug","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e217b45bdb3833bb9b15793bf4a21f670bd476a3f78f986b586b7a23d43116d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:47:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:47:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e217b45bdb3833bb9b15793bf4a21f670bd476a3f78f986b586b7a23d43116d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e217b45bdb3833bb9b15793bf4a21f670bd476a3f78f986b586b7a23d43116d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e217b45bdb3833bb9b15793bf4a21f670bd476a3f78f986b586b7a23d43116d6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:47:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e217b45bdb3833bb9b15793bf4a21f670bd476a3f78f986b586b7a23d43116d6"} {"level":"debug","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e217b45bdb3833bb9b15793bf4a21f670bd476a3f78f986b586b7a23d43116d6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e217b45bdb3833bb9b15793bf4a21f670bd476a3f78f986b586b7a23d43116d6"} {"level":"debug","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e217b45bdb3833bb9b15793bf4a21f670bd476a3f78f986b586b7a23d43116d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:47:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:47:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e217b45bdb3833bb9b15793bf4a21f670bd476a3f78f986b586b7a23d43116d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e217b45bdb3833bb9b15793bf4a21f670bd476a3f78f986b586b7a23d43116d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e217b45bdb3833bb9b15793bf4a21f670bd476a3f78f986b586b7a23d43116d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:47:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:47:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e217b45bdb3833bb9b15793bf4a21f670bd476a3f78f986b586b7a23d43116d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5689fecadab00a84922b60c06a2ae5bf720b301169911f8b51ec4da84d01eb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:47:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:47:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e217b45bdb3833bb9b15793bf4a21f670bd476a3f78f986b586b7a23d43116d6"} {"level":"info","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5689fecadab00a84922b60c06a2ae5bf720b301169911f8b51ec4da84d01eb1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e217b45bdb3833bb9b15793bf4a21f670bd476a3f78f986b586b7a23d43116d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:47:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:47:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e217b45bdb3833bb9b15793bf4a21f670bd476a3f78f986b586b7a23d43116d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5689fecadab00a84922b60c06a2ae5bf720b301169911f8b51ec4da84d01eb1"} {"level":"info","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e217b45bdb3833bb9b15793bf4a21f670bd476a3f78f986b586b7a23d43116d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5689fecadab00a84922b60c06a2ae5bf720b301169911f8b51ec4da84d01eb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:47:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:47:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5689fecadab00a84922b60c06a2ae5bf720b301169911f8b51ec4da84d01eb1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5689fecadab00a84922b60c06a2ae5bf720b301169911f8b51ec4da84d01eb1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e217b45bdb3833bb9b15793bf4a21f670bd476a3f78f986b586b7a23d43116d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:47:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:47:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e217b45bdb3833bb9b15793bf4a21f670bd476a3f78f986b586b7a23d43116d6"} {"level":"info","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e217b45bdb3833bb9b15793bf4a21f670bd476a3f78f986b586b7a23d43116d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5689fecadab00a84922b60c06a2ae5bf720b301169911f8b51ec4da84d01eb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:47:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:47:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5689fecadab00a84922b60c06a2ae5bf720b301169911f8b51ec4da84d01eb1"} {"level":"info","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5689fecadab00a84922b60c06a2ae5bf720b301169911f8b51ec4da84d01eb1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e217b45bdb3833bb9b15793bf4a21f670bd476a3f78f986b586b7a23d43116d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5689fecadab00a84922b60c06a2ae5bf720b301169911f8b51ec4da84d01eb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:47:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:47:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5689fecadab00a84922b60c06a2ae5bf720b301169911f8b51ec4da84d01eb1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5689fecadab00a84922b60c06a2ae5bf720b301169911f8b51ec4da84d01eb1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e217b45bdb3833bb9b15793bf4a21f670bd476a3f78f986b586b7a23d43116d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5689fecadab00a84922b60c06a2ae5bf720b301169911f8b51ec4da84d01eb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:47:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:47:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5689fecadab00a84922b60c06a2ae5bf720b301169911f8b51ec4da84d01eb1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e217b45bdb3833bb9b15793bf4a21f670bd476a3f78f986b586b7a23d43116d6"} {"level":"error","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a5689fecadab00a84922b60c06a2ae5bf720b301169911f8b51ec4da84d01eb1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a5689fecadab00a84922b60c06a2ae5bf720b301169911f8b51ec4da84d01eb1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd6f4a6dd2ba497dcfb8631dd6f30d9c58d2917dc54908cdb79ac471dfe95347","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:47:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:47:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd6f4a6dd2ba497dcfb8631dd6f30d9c58d2917dc54908cdb79ac471dfe95347","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5689fecadab00a84922b60c06a2ae5bf720b301169911f8b51ec4da84d01eb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:47:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:47:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5689fecadab00a84922b60c06a2ae5bf720b301169911f8b51ec4da84d01eb1"} {"level":"info","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5689fecadab00a84922b60c06a2ae5bf720b301169911f8b51ec4da84d01eb1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e217b45bdb3833bb9b15793bf4a21f670bd476a3f78f986b586b7a23d43116d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:47:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:47:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e217b45bdb3833bb9b15793bf4a21f670bd476a3f78f986b586b7a23d43116d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd6f4a6dd2ba497dcfb8631dd6f30d9c58d2917dc54908cdb79ac471dfe95347"} {"level":"info","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e217b45bdb3833bb9b15793bf4a21f670bd476a3f78f986b586b7a23d43116d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd6f4a6dd2ba497dcfb8631dd6f30d9c58d2917dc54908cdb79ac471dfe95347","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:47:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:47:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd6f4a6dd2ba497dcfb8631dd6f30d9c58d2917dc54908cdb79ac471dfe95347"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5689fecadab00a84922b60c06a2ae5bf720b301169911f8b51ec4da84d01eb1"} {"level":"info","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd6f4a6dd2ba497dcfb8631dd6f30d9c58d2917dc54908cdb79ac471dfe95347","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5689fecadab00a84922b60c06a2ae5bf720b301169911f8b51ec4da84d01eb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:47:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:47:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5689fecadab00a84922b60c06a2ae5bf720b301169911f8b51ec4da84d01eb1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5689fecadab00a84922b60c06a2ae5bf720b301169911f8b51ec4da84d01eb1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e217b45bdb3833bb9b15793bf4a21f670bd476a3f78f986b586b7a23d43116d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:47:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:47:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e217b45bdb3833bb9b15793bf4a21f670bd476a3f78f986b586b7a23d43116d6"} {"level":"info","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e217b45bdb3833bb9b15793bf4a21f670bd476a3f78f986b586b7a23d43116d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd6f4a6dd2ba497dcfb8631dd6f30d9c58d2917dc54908cdb79ac471dfe95347","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:47:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:47:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd6f4a6dd2ba497dcfb8631dd6f30d9c58d2917dc54908cdb79ac471dfe95347","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5689fecadab00a84922b60c06a2ae5bf720b301169911f8b51ec4da84d01eb1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e217b45bdb3833bb9b15793bf4a21f670bd476a3f78f986b586b7a23d43116d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:47:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:47:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e217b45bdb3833bb9b15793bf4a21f670bd476a3f78f986b586b7a23d43116d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd6f4a6dd2ba497dcfb8631dd6f30d9c58d2917dc54908cdb79ac471dfe95347"} {"level":"info","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e217b45bdb3833bb9b15793bf4a21f670bd476a3f78f986b586b7a23d43116d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40f822f029acdd135713ad10c8c3b82ecc1dc2eba9ba5114465e879e4b725009","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:47:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:47:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40f822f029acdd135713ad10c8c3b82ecc1dc2eba9ba5114465e879e4b725009","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd6f4a6dd2ba497dcfb8631dd6f30d9c58d2917dc54908cdb79ac471dfe95347","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:47:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:47:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd6f4a6dd2ba497dcfb8631dd6f30d9c58d2917dc54908cdb79ac471dfe95347"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd6f4a6dd2ba497dcfb8631dd6f30d9c58d2917dc54908cdb79ac471dfe95347","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e217b45bdb3833bb9b15793bf4a21f670bd476a3f78f986b586b7a23d43116d6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40f822f029acdd135713ad10c8c3b82ecc1dc2eba9ba5114465e879e4b725009","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd6f4a6dd2ba497dcfb8631dd6f30d9c58d2917dc54908cdb79ac471dfe95347","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40f822f029acdd135713ad10c8c3b82ecc1dc2eba9ba5114465e879e4b725009","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5689fecadab00a84922b60c06a2ae5bf720b301169911f8b51ec4da84d01eb1"} {"level":"debug","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40f822f029acdd135713ad10c8c3b82ecc1dc2eba9ba5114465e879e4b725009","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e217b45bdb3833bb9b15793bf4a21f670bd476a3f78f986b586b7a23d43116d6"} {"level":"debug","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"339b57704e70d0fb8697828e86360fca1ce15291f7f9fc50c1c7180072618410","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:47:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:47:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"339b57704e70d0fb8697828e86360fca1ce15291f7f9fc50c1c7180072618410","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"644b25497dafd1d18b1cdc3daae1a869c0625300b04001557069fee80456751e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:47:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:47:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40f822f029acdd135713ad10c8c3b82ecc1dc2eba9ba5114465e879e4b725009"} {"level":"info","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"644b25497dafd1d18b1cdc3daae1a869c0625300b04001557069fee80456751e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"339b57704e70d0fb8697828e86360fca1ce15291f7f9fc50c1c7180072618410","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6db811546e8e78dde17877aa53d2e62dc6d320c6da28db90e1c7e97222d64ecb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:47:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:47:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd6f4a6dd2ba497dcfb8631dd6f30d9c58d2917dc54908cdb79ac471dfe95347"} {"level":"info","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6db811546e8e78dde17877aa53d2e62dc6d320c6da28db90e1c7e97222d64ecb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"644b25497dafd1d18b1cdc3daae1a869c0625300b04001557069fee80456751e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40f822f029acdd135713ad10c8c3b82ecc1dc2eba9ba5114465e879e4b725009","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:47:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:47:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40f822f029acdd135713ad10c8c3b82ecc1dc2eba9ba5114465e879e4b725009"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40f822f029acdd135713ad10c8c3b82ecc1dc2eba9ba5114465e879e4b725009","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"339b57704e70d0fb8697828e86360fca1ce15291f7f9fc50c1c7180072618410","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:47:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:47:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/339b57704e70d0fb8697828e86360fca1ce15291f7f9fc50c1c7180072618410"} {"level":"info","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"339b57704e70d0fb8697828e86360fca1ce15291f7f9fc50c1c7180072618410","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcb183a5b1ff798047f6b88ef621f0b5481f9278ddb6c00990f4900cf778f111","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:47:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:47:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/644b25497dafd1d18b1cdc3daae1a869c0625300b04001557069fee80456751e"} {"level":"info","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcb183a5b1ff798047f6b88ef621f0b5481f9278ddb6c00990f4900cf778f111","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6db811546e8e78dde17877aa53d2e62dc6d320c6da28db90e1c7e97222d64ecb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:47:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:47:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6db811546e8e78dde17877aa53d2e62dc6d320c6da28db90e1c7e97222d64ecb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"644b25497dafd1d18b1cdc3daae1a869c0625300b04001557069fee80456751e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:47:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:47:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["644b25497dafd1d18b1cdc3daae1a869c0625300b04001557069fee80456751e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6db811546e8e78dde17877aa53d2e62dc6d320c6da28db90e1c7e97222d64ecb"} {"level":"info","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"644b25497dafd1d18b1cdc3daae1a869c0625300b04001557069fee80456751e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40f822f029acdd135713ad10c8c3b82ecc1dc2eba9ba5114465e879e4b725009","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"339b57704e70d0fb8697828e86360fca1ce15291f7f9fc50c1c7180072618410","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:47:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:47:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["339b57704e70d0fb8697828e86360fca1ce15291f7f9fc50c1c7180072618410"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcb183a5b1ff798047f6b88ef621f0b5481f9278ddb6c00990f4900cf778f111"} {"level":"info","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"339b57704e70d0fb8697828e86360fca1ce15291f7f9fc50c1c7180072618410","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcb183a5b1ff798047f6b88ef621f0b5481f9278ddb6c00990f4900cf778f111","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:47:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:47:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dcb183a5b1ff798047f6b88ef621f0b5481f9278ddb6c00990f4900cf778f111"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40f822f029acdd135713ad10c8c3b82ecc1dc2eba9ba5114465e879e4b725009"} {"level":"info","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcb183a5b1ff798047f6b88ef621f0b5481f9278ddb6c00990f4900cf778f111","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6db811546e8e78dde17877aa53d2e62dc6d320c6da28db90e1c7e97222d64ecb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:47:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:47:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6db811546e8e78dde17877aa53d2e62dc6d320c6da28db90e1c7e97222d64ecb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6db811546e8e78dde17877aa53d2e62dc6d320c6da28db90e1c7e97222d64ecb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"644b25497dafd1d18b1cdc3daae1a869c0625300b04001557069fee80456751e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"339b57704e70d0fb8697828e86360fca1ce15291f7f9fc50c1c7180072618410","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:47:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:47:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/339b57704e70d0fb8697828e86360fca1ce15291f7f9fc50c1c7180072618410"} {"level":"info","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"339b57704e70d0fb8697828e86360fca1ce15291f7f9fc50c1c7180072618410","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcb183a5b1ff798047f6b88ef621f0b5481f9278ddb6c00990f4900cf778f111","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6db811546e8e78dde17877aa53d2e62dc6d320c6da28db90e1c7e97222d64ecb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:47:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:47:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6db811546e8e78dde17877aa53d2e62dc6d320c6da28db90e1c7e97222d64ecb"} {"level":"info","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6db811546e8e78dde17877aa53d2e62dc6d320c6da28db90e1c7e97222d64ecb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"339b57704e70d0fb8697828e86360fca1ce15291f7f9fc50c1c7180072618410","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:47:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:47:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["339b57704e70d0fb8697828e86360fca1ce15291f7f9fc50c1c7180072618410"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"339b57704e70d0fb8697828e86360fca1ce15291f7f9fc50c1c7180072618410","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6db811546e8e78dde17877aa53d2e62dc6d320c6da28db90e1c7e97222d64ecb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:47:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:47:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6db811546e8e78dde17877aa53d2e62dc6d320c6da28db90e1c7e97222d64ecb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/644b25497dafd1d18b1cdc3daae1a869c0625300b04001557069fee80456751e"} {"level":"info","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcb183a5b1ff798047f6b88ef621f0b5481f9278ddb6c00990f4900cf778f111"} {"level":"info","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/339b57704e70d0fb8697828e86360fca1ce15291f7f9fc50c1c7180072618410"} {"level":"info","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6db811546e8e78dde17877aa53d2e62dc6d320c6da28db90e1c7e97222d64ecb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"339b57704e70d0fb8697828e86360fca1ce15291f7f9fc50c1c7180072618410","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6db811546e8e78dde17877aa53d2e62dc6d320c6da28db90e1c7e97222d64ecb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:47:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:47:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6db811546e8e78dde17877aa53d2e62dc6d320c6da28db90e1c7e97222d64ecb"} {"level":"info","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6db811546e8e78dde17877aa53d2e62dc6d320c6da28db90e1c7e97222d64ecb"} {"level":"info","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6db811546e8e78dde17877aa53d2e62dc6d320c6da28db90e1c7e97222d64ecb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6db811546e8e78dde17877aa53d2e62dc6d320c6da28db90e1c7e97222d64ecb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6db811546e8e78dde17877aa53d2e62dc6d320c6da28db90e1c7e97222d64ecb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6db811546e8e78dde17877aa53d2e62dc6d320c6da28db90e1c7e97222d64ecb"} {"level":"debug","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6db811546e8e78dde17877aa53d2e62dc6d320c6da28db90e1c7e97222d64ecb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:47:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:47:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6db811546e8e78dde17877aa53d2e62dc6d320c6da28db90e1c7e97222d64ecb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6db811546e8e78dde17877aa53d2e62dc6d320c6da28db90e1c7e97222d64ecb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6db811546e8e78dde17877aa53d2e62dc6d320c6da28db90e1c7e97222d64ecb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-29T18:47:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-29T18:47:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6db811546e8e78dde17877aa53d2e62dc6d320c6da28db90e1c7e97222d64ecb"} {"level":"info","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6db811546e8e78dde17877aa53d2e62dc6d320c6da28db90e1c7e97222d64ecb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6db811546e8e78dde17877aa53d2e62dc6d320c6da28db90e1c7e97222d64ecb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6db811546e8e78dde17877aa53d2e62dc6d320c6da28db90e1c7e97222d64ecb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6db811546e8e78dde17877aa53d2e62dc6d320c6da28db90e1c7e97222d64ecb"} {"level":"debug","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6db811546e8e78dde17877aa53d2e62dc6d320c6da28db90e1c7e97222d64ecb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-29T18:47:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-29T18:47:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6db811546e8e78dde17877aa53d2e62dc6d320c6da28db90e1c7e97222d64ecb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6db811546e8e78dde17877aa53d2e62dc6d320c6da28db90e1c7e97222d64ecb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6db811546e8e78dde17877aa53d2e62dc6d320c6da28db90e1c7e97222d64ecb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-29T18:47:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6db811546e8e78dde17877aa53d2e62dc6d320c6da28db90e1c7e97222d64ecb"} {"level":"info","ts":"2026-07-29T18:48:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3afbf933-71c3-4a91-bb0c-18488c41dfcb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43104","PortSpecifier":{"PortValue":43104}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3afbf933-71c3-4a91-bb0c-18488c41dfcb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-479e5c.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T18:48:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3afbf933-71c3-4a91-bb0c-18488c41dfcb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43104","PortSpecifier":{"PortValue":43104}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785350895,"nanos":125260157},"http":{"id":"3afbf933-71c3-4a91-bb0c-18488c41dfcb","method":"POST","headers":{":authority":"e2e-ipp-a-479e5c.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T18:48:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3afbf933-71c3-4a91-bb0c-18488c41dfcb","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-29T18:48:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3afbf933-71c3-4a91-bb0c-18488c41dfcb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8e218b41-a126-4bf8-ae17-9a90356caab5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=178173f8-337c-4e3f-884b-fd9042aa046c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/31eca5b07dec"]}} {"level":"debug","ts":"2026-07-29T18:48:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3afbf933-71c3-4a91-bb0c-18488c41dfcb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/31eca5b07dec"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=178173f8-337c-4e3f-884b-fd9042aa046c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8e218b41-a126-4bf8-ae17-9a90356caab5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a5689fecadab00a84922b60c06a2ae5bf720b301169911f8b51ec4da84d01eb1"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.72:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-479e5c.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T18:48:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3afbf933-71c3-4a91-bb0c-18488c41dfcb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:48:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3afbf933-71c3-4a91-bb0c-18488c41dfcb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:48:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3afbf933-71c3-4a91-bb0c-18488c41dfcb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-479e5c/ipp-route-479e5c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-479e5c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:48:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3afbf933-71c3-4a91-bb0c-18488c41dfcb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-29T18:48:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3afbf933-71c3-4a91-bb0c-18488c41dfcb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T18:48:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3afbf933-71c3-4a91-bb0c-18488c41dfcb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-29T18:48:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3afbf933-71c3-4a91-bb0c-18488c41dfcb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T18:48:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3afbf933-71c3-4a91-bb0c-18488c41dfcb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T18:48:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"532e2401-6c1a-4f18-84f1-9e5885789191","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43108","PortSpecifier":{"PortValue":43108}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"532e2401-6c1a-4f18-84f1-9e5885789191","method":"POST","path":"/ai-tenant-e2e-ipp-a-479e5c/ipp-route-479e5c/v1/chat/completions","host":"e2e-ipp-a-479e5c.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-29T18:48:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"532e2401-6c1a-4f18-84f1-9e5885789191","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43108","PortSpecifier":{"PortValue":43108}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785350897,"nanos":190729162},"http":{"id":"532e2401-6c1a-4f18-84f1-9e5885789191","method":"POST","headers":{":authority":"e2e-ipp-a-479e5c.apps.243feb21-bd40-4299-af4f-31eca5b07dec.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-479e5c/ipp-route-479e5c/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T18:48:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"532e2401-6c1a-4f18-84f1-9e5885789191","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-GOdfIhz9indRw7Xf_kw53z0ub3fPis00T4pC05E8n0TU9PYtsJ3Cda9fYKtA"} {"level":"debug","ts":"2026-07-29T18:48:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"532e2401-6c1a-4f18-84f1-9e5885789191","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-479e5c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-GOdfIhz9indRw7Xf_kw53z0ub3fPis00T4pC05E8n0TU9PYtsJ3Cda9fYKtA\"}"} {"level":"debug","ts":"2026-07-29T18:48:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"532e2401-6c1a-4f18-84f1-9e5885789191","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-479e5c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5bb71ed9-28fe-482d-8fd7-80e274683872","keyName":"e2e-ipp-479e5c","subscription":"ipp-route-479e5c-sub","tenant":"e2e-ipp-a-479e5c","userId":"5bb71ed9-28fe-482d-8fd7-80e274683872","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-29T18:48:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"532e2401-6c1a-4f18-84f1-9e5885789191","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-479e5c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-ipp-a-479e5c/ipp-route-479e5c\",\"requestedSubscription\":\"ipp-route-479e5c-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-29T18:48:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"532e2401-6c1a-4f18-84f1-9e5885789191","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-479e5c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-479e5c/models/facebook/opt-125m","name":"ipp-route-479e5c","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-479e5c-sub","namespace":"ai-tenant-e2e-ipp-a-479e5c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-479e5c/ipp-route-479e5c"}} {"level":"debug","ts":"2026-07-29T18:48:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"532e2401-6c1a-4f18-84f1-9e5885789191","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-29T18:48:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"532e2401-6c1a-4f18-84f1-9e5885789191","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:48:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"532e2401-6c1a-4f18-84f1-9e5885789191","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:48:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"532e2401-6c1a-4f18-84f1-9e5885789191","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:48:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"532e2401-6c1a-4f18-84f1-9e5885789191","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-479e5c/ipp-route-479e5c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-479e5c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-29T18:48:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"532e2401-6c1a-4f18-84f1-9e5885789191","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-29T18:48:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"532e2401-6c1a-4f18-84f1-9e5885789191","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-29T18:48:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"532e2401-6c1a-4f18-84f1-9e5885789191","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-479e5c-sub"} {"level":"debug","ts":"2026-07-29T18:48:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"532e2401-6c1a-4f18-84f1-9e5885789191","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5bb71ed9-28fe-482d-8fd7-80e274683872","keyName":"e2e-ipp-479e5c","selected_subscription":"ipp-route-479e5c-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-479e5c/ipp-route-479e5c-sub@ai-tenant-e2e-ipp-a-479e5c/ipp-route-479e5c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-479e5c/models/facebook/opt-125m","name":"ipp-route-479e5c","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-479e5c-sub","namespace":"ai-tenant-e2e-ipp-a-479e5c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-479e5c/ipp-route-479e5c"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-29T18:48:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"532e2401-6c1a-4f18-84f1-9e5885789191","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-29T18:48:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"532e2401-6c1a-4f18-84f1-9e5885789191","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-29T18:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e217b45bdb3833bb9b15793bf4a21f670bd476a3f78f986b586b7a23d43116d6"} {"level":"info","ts":"2026-07-29T18:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4553f6be9a68aa372d0fc42edd572ea78f3837b5259036616195e5bcd52a207f"} {"level":"info","ts":"2026-07-29T18:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fd6f4a6dd2ba497dcfb8631dd6f30d9c58d2917dc54908cdb79ac471dfe95347"} {"level":"info","ts":"2026-07-29T18:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/40f822f029acdd135713ad10c8c3b82ecc1dc2eba9ba5114465e879e4b725009"} {"level":"info","ts":"2026-07-29T18:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/121702789baf5bf8936e619d59c3adb401ba9969991d113ea73d127e66bb6261"} {"level":"info","ts":"2026-07-29T18:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6db811546e8e78dde17877aa53d2e62dc6d320c6da28db90e1c7e97222d64ecb"} {"level":"info","ts":"2026-07-29T18:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a5689fecadab00a84922b60c06a2ae5bf720b301169911f8b51ec4da84d01eb1"} {"level":"info","ts":"2026-07-29T18:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/339b57704e70d0fb8697828e86360fca1ce15291f7f9fc50c1c7180072618410"} {"level":"info","ts":"2026-07-29T18:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b42705b225c8fbd387e17699b908907f43b5b5028dd6d99b674697c38f68d01f"} {"level":"info","ts":"2026-07-29T18:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dcb183a5b1ff798047f6b88ef621f0b5481f9278ddb6c00990f4900cf778f111"} {"level":"info","ts":"2026-07-29T18:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/644b25497dafd1d18b1cdc3daae1a869c0625300b04001557069fee80456751e"} {"level":"info","ts":"2026-07-29T18:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2e644fbd3cba7560dd515749ddb0f025a044fd52af923e2102f25387b05dd986"}