--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"debug","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f216f7ef871a1c96d21302b0eda9b2cb2dc9ae53abfb766b562ab6d8def1d763","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f216f7ef871a1c96d21302b0eda9b2cb2dc9ae53abfb766b562ab6d8def1d763"} {"level":"debug","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f216f7ef871a1c96d21302b0eda9b2cb2dc9ae53abfb766b562ab6d8def1d763","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f216f7ef871a1c96d21302b0eda9b2cb2dc9ae53abfb766b562ab6d8def1d763"} {"level":"debug","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f216f7ef871a1c96d21302b0eda9b2cb2dc9ae53abfb766b562ab6d8def1d763","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:52:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:52:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f216f7ef871a1c96d21302b0eda9b2cb2dc9ae53abfb766b562ab6d8def1d763"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f216f7ef871a1c96d21302b0eda9b2cb2dc9ae53abfb766b562ab6d8def1d763","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f216f7ef871a1c96d21302b0eda9b2cb2dc9ae53abfb766b562ab6d8def1d763","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:52:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:52:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f216f7ef871a1c96d21302b0eda9b2cb2dc9ae53abfb766b562ab6d8def1d763","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f216f7ef871a1c96d21302b0eda9b2cb2dc9ae53abfb766b562ab6d8def1d763","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f216f7ef871a1c96d21302b0eda9b2cb2dc9ae53abfb766b562ab6d8def1d763","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f216f7ef871a1c96d21302b0eda9b2cb2dc9ae53abfb766b562ab6d8def1d763"} {"level":"debug","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f216f7ef871a1c96d21302b0eda9b2cb2dc9ae53abfb766b562ab6d8def1d763","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f216f7ef871a1c96d21302b0eda9b2cb2dc9ae53abfb766b562ab6d8def1d763"} {"level":"debug","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f216f7ef871a1c96d21302b0eda9b2cb2dc9ae53abfb766b562ab6d8def1d763","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:52:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:52:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f216f7ef871a1c96d21302b0eda9b2cb2dc9ae53abfb766b562ab6d8def1d763"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f216f7ef871a1c96d21302b0eda9b2cb2dc9ae53abfb766b562ab6d8def1d763","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f216f7ef871a1c96d21302b0eda9b2cb2dc9ae53abfb766b562ab6d8def1d763","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:52:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:52:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f216f7ef871a1c96d21302b0eda9b2cb2dc9ae53abfb766b562ab6d8def1d763","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f216f7ef871a1c96d21302b0eda9b2cb2dc9ae53abfb766b562ab6d8def1d763","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f216f7ef871a1c96d21302b0eda9b2cb2dc9ae53abfb766b562ab6d8def1d763"} {"level":"debug","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f216f7ef871a1c96d21302b0eda9b2cb2dc9ae53abfb766b562ab6d8def1d763","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f216f7ef871a1c96d21302b0eda9b2cb2dc9ae53abfb766b562ab6d8def1d763"} {"level":"debug","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f216f7ef871a1c96d21302b0eda9b2cb2dc9ae53abfb766b562ab6d8def1d763","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:52:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:52:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f216f7ef871a1c96d21302b0eda9b2cb2dc9ae53abfb766b562ab6d8def1d763"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f216f7ef871a1c96d21302b0eda9b2cb2dc9ae53abfb766b562ab6d8def1d763","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f216f7ef871a1c96d21302b0eda9b2cb2dc9ae53abfb766b562ab6d8def1d763","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:52:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:52:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f216f7ef871a1c96d21302b0eda9b2cb2dc9ae53abfb766b562ab6d8def1d763","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f216f7ef871a1c96d21302b0eda9b2cb2dc9ae53abfb766b562ab6d8def1d763","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f216f7ef871a1c96d21302b0eda9b2cb2dc9ae53abfb766b562ab6d8def1d763","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f216f7ef871a1c96d21302b0eda9b2cb2dc9ae53abfb766b562ab6d8def1d763"} {"level":"debug","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f216f7ef871a1c96d21302b0eda9b2cb2dc9ae53abfb766b562ab6d8def1d763","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f216f7ef871a1c96d21302b0eda9b2cb2dc9ae53abfb766b562ab6d8def1d763"} {"level":"debug","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f216f7ef871a1c96d21302b0eda9b2cb2dc9ae53abfb766b562ab6d8def1d763","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:52:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:52:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f216f7ef871a1c96d21302b0eda9b2cb2dc9ae53abfb766b562ab6d8def1d763"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f216f7ef871a1c96d21302b0eda9b2cb2dc9ae53abfb766b562ab6d8def1d763","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f216f7ef871a1c96d21302b0eda9b2cb2dc9ae53abfb766b562ab6d8def1d763","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:52:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:52:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f216f7ef871a1c96d21302b0eda9b2cb2dc9ae53abfb766b562ab6d8def1d763"} {"level":"info","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:52:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:52:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07"} {"level":"info","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:52:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:52:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"info","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07"} {"level":"debug","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:52:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:52:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:52:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:52:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07"} {"level":"info","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:52:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:52:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07"} {"level":"info","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07"} {"level":"debug","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:52:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:52:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:52:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:52:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07"} {"level":"debug","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07"} {"level":"debug","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:52:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:52:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:52:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:52:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07"} {"level":"info","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:52:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:52:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07"} {"level":"info","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:52:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:52:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73653ac8666fcd79b5d78d07300f1788de2c35ef7168a1a4bda9693c80a0cc77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:52:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:52:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73653ac8666fcd79b5d78d07300f1788de2c35ef7168a1a4bda9693c80a0cc77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:52:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:52:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07"} {"level":"info","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73653ac8666fcd79b5d78d07300f1788de2c35ef7168a1a4bda9693c80a0cc77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:52:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:52:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73653ac8666fcd79b5d78d07300f1788de2c35ef7168a1a4bda9693c80a0cc77"} {"level":"info","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73653ac8666fcd79b5d78d07300f1788de2c35ef7168a1a4bda9693c80a0cc77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73653ac8666fcd79b5d78d07300f1788de2c35ef7168a1a4bda9693c80a0cc77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:52:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:52:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73653ac8666fcd79b5d78d07300f1788de2c35ef7168a1a4bda9693c80a0cc77"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07"} {"level":"info","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73653ac8666fcd79b5d78d07300f1788de2c35ef7168a1a4bda9693c80a0cc77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73653ac8666fcd79b5d78d07300f1788de2c35ef7168a1a4bda9693c80a0cc77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:52:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:52:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73653ac8666fcd79b5d78d07300f1788de2c35ef7168a1a4bda9693c80a0cc77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:52:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:52:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73653ac8666fcd79b5d78d07300f1788de2c35ef7168a1a4bda9693c80a0cc77"} {"level":"info","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73653ac8666fcd79b5d78d07300f1788de2c35ef7168a1a4bda9693c80a0cc77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73653ac8666fcd79b5d78d07300f1788de2c35ef7168a1a4bda9693c80a0cc77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73653ac8666fcd79b5d78d07300f1788de2c35ef7168a1a4bda9693c80a0cc77","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73653ac8666fcd79b5d78d07300f1788de2c35ef7168a1a4bda9693c80a0cc77"} {"level":"info","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07"} {"level":"debug","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:52:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:52:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73653ac8666fcd79b5d78d07300f1788de2c35ef7168a1a4bda9693c80a0cc77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:52:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:52:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73653ac8666fcd79b5d78d07300f1788de2c35ef7168a1a4bda9693c80a0cc77"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c"} {"level":"info","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73653ac8666fcd79b5d78d07300f1788de2c35ef7168a1a4bda9693c80a0cc77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73653ac8666fcd79b5d78d07300f1788de2c35ef7168a1a4bda9693c80a0cc77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c"} {"level":"debug","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:52:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:52:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73653ac8666fcd79b5d78d07300f1788de2c35ef7168a1a4bda9693c80a0cc77"} {"level":"info","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:52:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:52:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c"} {"level":"debug","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c"} {"level":"debug","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:52:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:52:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:52:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:52:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caed356d08f10d644336ef04271d777083d235e6f704a83e706ec7294e204748","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:52:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:52:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c"} {"level":"info","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caed356d08f10d644336ef04271d777083d235e6f704a83e706ec7294e204748","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caed356d08f10d644336ef04271d777083d235e6f704a83e706ec7294e204748","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:52:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:52:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caed356d08f10d644336ef04271d777083d235e6f704a83e706ec7294e204748"} {"level":"info","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caed356d08f10d644336ef04271d777083d235e6f704a83e706ec7294e204748","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caed356d08f10d644336ef04271d777083d235e6f704a83e706ec7294e204748","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:52:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:52:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["caed356d08f10d644336ef04271d777083d235e6f704a83e706ec7294e204748"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c"} {"level":"info","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caed356d08f10d644336ef04271d777083d235e6f704a83e706ec7294e204748","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caed356d08f10d644336ef04271d777083d235e6f704a83e706ec7294e204748","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:52:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:52:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caed356d08f10d644336ef04271d777083d235e6f704a83e706ec7294e204748"} {"level":"info","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caed356d08f10d644336ef04271d777083d235e6f704a83e706ec7294e204748","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caed356d08f10d644336ef04271d777083d235e6f704a83e706ec7294e204748","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:52:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:52:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caed356d08f10d644336ef04271d777083d235e6f704a83e706ec7294e204748"} {"level":"info","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caed356d08f10d644336ef04271d777083d235e6f704a83e706ec7294e204748","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5f86d90f9f74dcabfbc430bf86cc9b51fc274bfad1d655dcc817b7f5c5ec380","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:52:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:52:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caed356d08f10d644336ef04271d777083d235e6f704a83e706ec7294e204748"} {"level":"info","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5f86d90f9f74dcabfbc430bf86cc9b51fc274bfad1d655dcc817b7f5c5ec380","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caed356d08f10d644336ef04271d777083d235e6f704a83e706ec7294e204748","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:52:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:52:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["caed356d08f10d644336ef04271d777083d235e6f704a83e706ec7294e204748"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c"} {"level":"info","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caed356d08f10d644336ef04271d777083d235e6f704a83e706ec7294e204748","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5f86d90f9f74dcabfbc430bf86cc9b51fc274bfad1d655dcc817b7f5c5ec380","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:52:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:52:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5f86d90f9f74dcabfbc430bf86cc9b51fc274bfad1d655dcc817b7f5c5ec380","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caed356d08f10d644336ef04271d777083d235e6f704a83e706ec7294e204748","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5f86d90f9f74dcabfbc430bf86cc9b51fc274bfad1d655dcc817b7f5c5ec380","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5f86d90f9f74dcabfbc430bf86cc9b51fc274bfad1d655dcc817b7f5c5ec380"} {"level":"debug","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5f86d90f9f74dcabfbc430bf86cc9b51fc274bfad1d655dcc817b7f5c5ec380","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:52:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:52:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5f86d90f9f74dcabfbc430bf86cc9b51fc274bfad1d655dcc817b7f5c5ec380"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caed356d08f10d644336ef04271d777083d235e6f704a83e706ec7294e204748"} {"level":"info","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5f86d90f9f74dcabfbc430bf86cc9b51fc274bfad1d655dcc817b7f5c5ec380","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5f86d90f9f74dcabfbc430bf86cc9b51fc274bfad1d655dcc817b7f5c5ec380","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:52:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:52:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5f86d90f9f74dcabfbc430bf86cc9b51fc274bfad1d655dcc817b7f5c5ec380","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5f86d90f9f74dcabfbc430bf86cc9b51fc274bfad1d655dcc817b7f5c5ec380","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5f86d90f9f74dcabfbc430bf86cc9b51fc274bfad1d655dcc817b7f5c5ec380"} {"level":"debug","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5f86d90f9f74dcabfbc430bf86cc9b51fc274bfad1d655dcc817b7f5c5ec380","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7404f275f657c4b6d31b159801ccdcdb2d6c89aad1172f4338d1ee7eb30d432d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:52:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:52:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5f86d90f9f74dcabfbc430bf86cc9b51fc274bfad1d655dcc817b7f5c5ec380"} {"level":"info","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7404f275f657c4b6d31b159801ccdcdb2d6c89aad1172f4338d1ee7eb30d432d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5f86d90f9f74dcabfbc430bf86cc9b51fc274bfad1d655dcc817b7f5c5ec380","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:52:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:52:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5f86d90f9f74dcabfbc430bf86cc9b51fc274bfad1d655dcc817b7f5c5ec380"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7404f275f657c4b6d31b159801ccdcdb2d6c89aad1172f4338d1ee7eb30d432d"} {"level":"info","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5f86d90f9f74dcabfbc430bf86cc9b51fc274bfad1d655dcc817b7f5c5ec380","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7404f275f657c4b6d31b159801ccdcdb2d6c89aad1172f4338d1ee7eb30d432d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:52:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:52:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7404f275f657c4b6d31b159801ccdcdb2d6c89aad1172f4338d1ee7eb30d432d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5f86d90f9f74dcabfbc430bf86cc9b51fc274bfad1d655dcc817b7f5c5ec380","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7404f275f657c4b6d31b159801ccdcdb2d6c89aad1172f4338d1ee7eb30d432d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7404f275f657c4b6d31b159801ccdcdb2d6c89aad1172f4338d1ee7eb30d432d"} {"level":"debug","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7404f275f657c4b6d31b159801ccdcdb2d6c89aad1172f4338d1ee7eb30d432d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:52:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:52:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7404f275f657c4b6d31b159801ccdcdb2d6c89aad1172f4338d1ee7eb30d432d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5f86d90f9f74dcabfbc430bf86cc9b51fc274bfad1d655dcc817b7f5c5ec380"} {"level":"info","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7404f275f657c4b6d31b159801ccdcdb2d6c89aad1172f4338d1ee7eb30d432d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7404f275f657c4b6d31b159801ccdcdb2d6c89aad1172f4338d1ee7eb30d432d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:52:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:52:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7404f275f657c4b6d31b159801ccdcdb2d6c89aad1172f4338d1ee7eb30d432d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7404f275f657c4b6d31b159801ccdcdb2d6c89aad1172f4338d1ee7eb30d432d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7404f275f657c4b6d31b159801ccdcdb2d6c89aad1172f4338d1ee7eb30d432d"} {"level":"debug","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7404f275f657c4b6d31b159801ccdcdb2d6c89aad1172f4338d1ee7eb30d432d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc2686f809ef511f320800989f88b2917ea4ef710cf35cabb9c946c18b0603af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:52:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:52:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc2686f809ef511f320800989f88b2917ea4ef710cf35cabb9c946c18b0603af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cdfe58fa7802314967f1cd2147f149066b2fb83578f677f06724f33d6efa449","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:52:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:52:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7404f275f657c4b6d31b159801ccdcdb2d6c89aad1172f4338d1ee7eb30d432d"} {"level":"info","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cdfe58fa7802314967f1cd2147f149066b2fb83578f677f06724f33d6efa449","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7404f275f657c4b6d31b159801ccdcdb2d6c89aad1172f4338d1ee7eb30d432d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:52:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:52:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7404f275f657c4b6d31b159801ccdcdb2d6c89aad1172f4338d1ee7eb30d432d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc2686f809ef511f320800989f88b2917ea4ef710cf35cabb9c946c18b0603af"} {"level":"info","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7404f275f657c4b6d31b159801ccdcdb2d6c89aad1172f4338d1ee7eb30d432d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc2686f809ef511f320800989f88b2917ea4ef710cf35cabb9c946c18b0603af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:52:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:52:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc2686f809ef511f320800989f88b2917ea4ef710cf35cabb9c946c18b0603af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cdfe58fa7802314967f1cd2147f149066b2fb83578f677f06724f33d6efa449"} {"level":"info","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc2686f809ef511f320800989f88b2917ea4ef710cf35cabb9c946c18b0603af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cdfe58fa7802314967f1cd2147f149066b2fb83578f677f06724f33d6efa449","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:52:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:52:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1cdfe58fa7802314967f1cd2147f149066b2fb83578f677f06724f33d6efa449"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc2686f809ef511f320800989f88b2917ea4ef710cf35cabb9c946c18b0603af"} {"level":"info","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cdfe58fa7802314967f1cd2147f149066b2fb83578f677f06724f33d6efa449","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7404f275f657c4b6d31b159801ccdcdb2d6c89aad1172f4338d1ee7eb30d432d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:52:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:52:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7404f275f657c4b6d31b159801ccdcdb2d6c89aad1172f4338d1ee7eb30d432d"} {"level":"info","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7404f275f657c4b6d31b159801ccdcdb2d6c89aad1172f4338d1ee7eb30d432d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc2686f809ef511f320800989f88b2917ea4ef710cf35cabb9c946c18b0603af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:52:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:52:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc2686f809ef511f320800989f88b2917ea4ef710cf35cabb9c946c18b0603af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cdfe58fa7802314967f1cd2147f149066b2fb83578f677f06724f33d6efa449","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"425a4a7b66f4735588e799427f21ef955aec14418f35a368a7f8f926914c2b43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:52:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:52:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc2686f809ef511f320800989f88b2917ea4ef710cf35cabb9c946c18b0603af"} {"level":"info","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"425a4a7b66f4735588e799427f21ef955aec14418f35a368a7f8f926914c2b43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7404f275f657c4b6d31b159801ccdcdb2d6c89aad1172f4338d1ee7eb30d432d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:52:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:52:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7404f275f657c4b6d31b159801ccdcdb2d6c89aad1172f4338d1ee7eb30d432d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cdfe58fa7802314967f1cd2147f149066b2fb83578f677f06724f33d6efa449"} {"level":"info","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7404f275f657c4b6d31b159801ccdcdb2d6c89aad1172f4338d1ee7eb30d432d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89ab29e3bd710b6d77daa98257dfa2a5e1d014d5a3cae336ad2573b205f57af6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:52:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:52:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/425a4a7b66f4735588e799427f21ef955aec14418f35a368a7f8f926914c2b43"} {"level":"info","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89ab29e3bd710b6d77daa98257dfa2a5e1d014d5a3cae336ad2573b205f57af6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc2686f809ef511f320800989f88b2917ea4ef710cf35cabb9c946c18b0603af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:52:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:52:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc2686f809ef511f320800989f88b2917ea4ef710cf35cabb9c946c18b0603af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc2686f809ef511f320800989f88b2917ea4ef710cf35cabb9c946c18b0603af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:52:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:52:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7404f275f657c4b6d31b159801ccdcdb2d6c89aad1172f4338d1ee7eb30d432d"} {"level":"info","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"425a4a7b66f4735588e799427f21ef955aec14418f35a368a7f8f926914c2b43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:52:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:52:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["425a4a7b66f4735588e799427f21ef955aec14418f35a368a7f8f926914c2b43"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89ab29e3bd710b6d77daa98257dfa2a5e1d014d5a3cae336ad2573b205f57af6"} {"level":"info","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc2686f809ef511f320800989f88b2917ea4ef710cf35cabb9c946c18b0603af"} {"level":"info","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"425a4a7b66f4735588e799427f21ef955aec14418f35a368a7f8f926914c2b43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7404f275f657c4b6d31b159801ccdcdb2d6c89aad1172f4338d1ee7eb30d432d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89ab29e3bd710b6d77daa98257dfa2a5e1d014d5a3cae336ad2573b205f57af6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:52:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:52:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89ab29e3bd710b6d77daa98257dfa2a5e1d014d5a3cae336ad2573b205f57af6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325"} {"level":"info","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/425a4a7b66f4735588e799427f21ef955aec14418f35a368a7f8f926914c2b43"} {"level":"info","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89ab29e3bd710b6d77daa98257dfa2a5e1d014d5a3cae336ad2573b205f57af6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc2686f809ef511f320800989f88b2917ea4ef710cf35cabb9c946c18b0603af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:52:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:52:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89ab29e3bd710b6d77daa98257dfa2a5e1d014d5a3cae336ad2573b205f57af6"} {"level":"info","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"425a4a7b66f4735588e799427f21ef955aec14418f35a368a7f8f926914c2b43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89ab29e3bd710b6d77daa98257dfa2a5e1d014d5a3cae336ad2573b205f57af6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:52:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:52:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325"} {"level":"info","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325"} {"level":"debug","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:52:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:52:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:52:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:52:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325"} {"level":"info","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325"} {"level":"debug","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:52:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:52:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:52:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:52:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325"} {"level":"debug","ts":"2026-07-24T17:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325"} {"level":"debug","ts":"2026-07-24T17:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:52:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:52:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:52:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:52:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325"} {"level":"debug","ts":"2026-07-24T17:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325"} {"level":"debug","ts":"2026-07-24T17:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:52:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:52:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:52:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:52:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325"} {"level":"debug","ts":"2026-07-24T17:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325"} {"level":"debug","ts":"2026-07-24T17:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:52:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:52:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:52:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:52:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325"} {"level":"info","ts":"2026-07-24T17:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325"} {"level":"debug","ts":"2026-07-24T17:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:52:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:52:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325"} {"level":"info","ts":"2026-07-24T17:52:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1d9e8ccd-2e45-4776-bd7c-9fa627b31dc5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41190","PortSpecifier":{"PortValue":41190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1d9e8ccd-2e45-4776-bd7c-9fa627b31dc5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-bb94b3.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:52:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1d9e8ccd-2e45-4776-bd7c-9fa627b31dc5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41190","PortSpecifier":{"PortValue":41190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915525,"nanos":708603244},"http":{"id":"1d9e8ccd-2e45-4776-bd7c-9fa627b31dc5","method":"POST","headers":{":authority":"e2e-shared-a-bb94b3.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:52:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1d9e8ccd-2e45-4776-bd7c-9fa627b31dc5","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T17:52:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1d9e8ccd-2e45-4776-bd7c-9fa627b31dc5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"badbe5d4-7ab5-425e-9873-63296dbdc8e7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2af0cd97-f569-450c-a76b-6c8d1b91d569"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/69d61257011a"]}} {"level":"debug","ts":"2026-07-24T17:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1d9e8ccd-2e45-4776-bd7c-9fa627b31dc5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/69d61257011a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2af0cd97-f569-450c-a76b-6c8d1b91d569"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"badbe5d4-7ab5-425e-9873-63296dbdc8e7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f3b9b9d1fe514ee98475d28c6dc78ebaf5e9456a9d22de3344d47e2334ec0b02"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bb94b3.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d9e8ccd-2e45-4776-bd7c-9fa627b31dc5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d9e8ccd-2e45-4776-bd7c-9fa627b31dc5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d9e8ccd-2e45-4776-bd7c-9fa627b31dc5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bb94b3/auth-test-model-bb94b3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bb94b3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:52:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1d9e8ccd-2e45-4776-bd7c-9fa627b31dc5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T17:52:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d9e8ccd-2e45-4776-bd7c-9fa627b31dc5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T17:52:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d9e8ccd-2e45-4776-bd7c-9fa627b31dc5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-24T17:52:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1d9e8ccd-2e45-4776-bd7c-9fa627b31dc5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:52:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1d9e8ccd-2e45-4776-bd7c-9fa627b31dc5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:52:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b84181a6-cef4-4acc-ab6f-98a6f06c9520","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51440","PortSpecifier":{"PortValue":51440}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b84181a6-cef4-4acc-ab6f-98a6f06c9520","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-5c7cfc.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:52:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b84181a6-cef4-4acc-ab6f-98a6f06c9520","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51440","PortSpecifier":{"PortValue":51440}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915525,"nanos":745195905},"http":{"id":"b84181a6-cef4-4acc-ab6f-98a6f06c9520","method":"POST","headers":{":authority":"e2e-shared-b-5c7cfc.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:52:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b84181a6-cef4-4acc-ab6f-98a6f06c9520","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T17:52:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b84181a6-cef4-4acc-ab6f-98a6f06c9520","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"badbe5d4-7ab5-425e-9873-63296dbdc8e7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2af0cd97-f569-450c-a76b-6c8d1b91d569"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/69d61257011a"]}} {"level":"debug","ts":"2026-07-24T17:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b84181a6-cef4-4acc-ab6f-98a6f06c9520","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/69d61257011a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2af0cd97-f569-450c-a76b-6c8d1b91d569"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"badbe5d4-7ab5-425e-9873-63296dbdc8e7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-5c7cfc.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b84181a6-cef4-4acc-ab6f-98a6f06c9520","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b84181a6-cef4-4acc-ab6f-98a6f06c9520","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b84181a6-cef4-4acc-ab6f-98a6f06c9520","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5c7cfc/auth-test-model-5c7cfc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-5c7cfc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:52:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b84181a6-cef4-4acc-ab6f-98a6f06c9520","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T17:52:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b84181a6-cef4-4acc-ab6f-98a6f06c9520","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:52:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b84181a6-cef4-4acc-ab6f-98a6f06c9520","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T17:52:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b84181a6-cef4-4acc-ab6f-98a6f06c9520","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:52:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b84181a6-cef4-4acc-ab6f-98a6f06c9520","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:52:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8292b88b-14f8-4dd4-95cc-915b7f04a18a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51450","PortSpecifier":{"PortValue":51450}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8292b88b-14f8-4dd4-95cc-915b7f04a18a","method":"GET","path":"/maas-api/v1/api-keys/6e997c34-f20a-42e4-9459-43a9736c5d64","host":"e2e-shared-b-5c7cfc.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:52:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8292b88b-14f8-4dd4-95cc-915b7f04a18a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51450","PortSpecifier":{"PortValue":51450}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915525,"nanos":784888475},"http":{"id":"8292b88b-14f8-4dd4-95cc-915b7f04a18a","method":"GET","headers":{":authority":"e2e-shared-b-5c7cfc.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/6e997c34-f20a-42e4-9459-43a9736c5d64",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:52:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8292b88b-14f8-4dd4-95cc-915b7f04a18a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T17:52:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8292b88b-14f8-4dd4-95cc-915b7f04a18a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"badbe5d4-7ab5-425e-9873-63296dbdc8e7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2af0cd97-f569-450c-a76b-6c8d1b91d569"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/69d61257011a"]}} {"level":"debug","ts":"2026-07-24T17:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8292b88b-14f8-4dd4-95cc-915b7f04a18a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/69d61257011a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2af0cd97-f569-450c-a76b-6c8d1b91d569"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"badbe5d4-7ab5-425e-9873-63296dbdc8e7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-5c7cfc.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/6e997c34-f20a-42e4-9459-43a9736c5d64",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8292b88b-14f8-4dd4-95cc-915b7f04a18a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8292b88b-14f8-4dd4-95cc-915b7f04a18a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8292b88b-14f8-4dd4-95cc-915b7f04a18a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5c7cfc/auth-test-model-5c7cfc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-5c7cfc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:52:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8292b88b-14f8-4dd4-95cc-915b7f04a18a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T17:52:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8292b88b-14f8-4dd4-95cc-915b7f04a18a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:52:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8292b88b-14f8-4dd4-95cc-915b7f04a18a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T17:52:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8292b88b-14f8-4dd4-95cc-915b7f04a18a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:52:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8292b88b-14f8-4dd4-95cc-915b7f04a18a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:52:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd6cbc53-43a4-4f10-824f-ea596b5949ed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41198","PortSpecifier":{"PortValue":41198}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fd6cbc53-43a4-4f10-824f-ea596b5949ed","method":"GET","path":"/maas-api/v1/api-keys/6e997c34-f20a-42e4-9459-43a9736c5d64","host":"e2e-shared-a-bb94b3.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:52:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd6cbc53-43a4-4f10-824f-ea596b5949ed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41198","PortSpecifier":{"PortValue":41198}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915525,"nanos":815878442},"http":{"id":"fd6cbc53-43a4-4f10-824f-ea596b5949ed","method":"GET","headers":{":authority":"e2e-shared-a-bb94b3.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/6e997c34-f20a-42e4-9459-43a9736c5d64",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:52:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fd6cbc53-43a4-4f10-824f-ea596b5949ed","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T17:52:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fd6cbc53-43a4-4f10-824f-ea596b5949ed","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"badbe5d4-7ab5-425e-9873-63296dbdc8e7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2af0cd97-f569-450c-a76b-6c8d1b91d569"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/69d61257011a"]}} {"level":"debug","ts":"2026-07-24T17:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fd6cbc53-43a4-4f10-824f-ea596b5949ed","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/69d61257011a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2af0cd97-f569-450c-a76b-6c8d1b91d569"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"badbe5d4-7ab5-425e-9873-63296dbdc8e7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f3b9b9d1fe514ee98475d28c6dc78ebaf5e9456a9d22de3344d47e2334ec0b02"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bb94b3.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/6e997c34-f20a-42e4-9459-43a9736c5d64",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd6cbc53-43a4-4f10-824f-ea596b5949ed","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd6cbc53-43a4-4f10-824f-ea596b5949ed","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd6cbc53-43a4-4f10-824f-ea596b5949ed","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bb94b3/auth-test-model-bb94b3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bb94b3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:52:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fd6cbc53-43a4-4f10-824f-ea596b5949ed","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T17:52:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd6cbc53-43a4-4f10-824f-ea596b5949ed","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:52:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd6cbc53-43a4-4f10-824f-ea596b5949ed","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T17:52:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd6cbc53-43a4-4f10-824f-ea596b5949ed","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:52:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd6cbc53-43a4-4f10-824f-ea596b5949ed","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1cdfe58fa7802314967f1cd2147f149066b2fb83578f677f06724f33d6efa449"} {"level":"info","ts":"2026-07-24T17:52:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07"} {"level":"info","ts":"2026-07-24T17:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/caed356d08f10d644336ef04271d777083d235e6f704a83e706ec7294e204748"} {"level":"info","ts":"2026-07-24T17:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/73653ac8666fcd79b5d78d07300f1788de2c35ef7168a1a4bda9693c80a0cc77"} {"level":"info","ts":"2026-07-24T17:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/425a4a7b66f4735588e799427f21ef955aec14418f35a368a7f8f926914c2b43"} {"level":"info","ts":"2026-07-24T17:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f216f7ef871a1c96d21302b0eda9b2cb2dc9ae53abfb766b562ab6d8def1d763"} {"level":"info","ts":"2026-07-24T17:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/89ab29e3bd710b6d77daa98257dfa2a5e1d014d5a3cae336ad2573b205f57af6"} {"level":"info","ts":"2026-07-24T17:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7404f275f657c4b6d31b159801ccdcdb2d6c89aad1172f4338d1ee7eb30d432d"} {"level":"info","ts":"2026-07-24T17:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c"} {"level":"info","ts":"2026-07-24T17:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cc2686f809ef511f320800989f88b2917ea4ef710cf35cabb9c946c18b0603af"} {"level":"info","ts":"2026-07-24T17:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f5f86d90f9f74dcabfbc430bf86cc9b51fc274bfad1d655dcc817b7f5c5ec380"} {"level":"info","ts":"2026-07-24T17:52:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325"} {"level":"debug","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89ab29e3bd710b6d77daa98257dfa2a5e1d014d5a3cae336ad2573b205f57af6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:52:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:52:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89ab29e3bd710b6d77daa98257dfa2a5e1d014d5a3cae336ad2573b205f57af6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89ab29e3bd710b6d77daa98257dfa2a5e1d014d5a3cae336ad2573b205f57af6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:52:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:52:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89ab29e3bd710b6d77daa98257dfa2a5e1d014d5a3cae336ad2573b205f57af6"} {"level":"info","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89ab29e3bd710b6d77daa98257dfa2a5e1d014d5a3cae336ad2573b205f57af6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89ab29e3bd710b6d77daa98257dfa2a5e1d014d5a3cae336ad2573b205f57af6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:52:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:52:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"89ab29e3bd710b6d77daa98257dfa2a5e1d014d5a3cae336ad2573b205f57af6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"89ab29e3bd710b6d77daa98257dfa2a5e1d014d5a3cae336ad2573b205f57af6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89ab29e3bd710b6d77daa98257dfa2a5e1d014d5a3cae336ad2573b205f57af6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89ab29e3bd710b6d77daa98257dfa2a5e1d014d5a3cae336ad2573b205f57af6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89ab29e3bd710b6d77daa98257dfa2a5e1d014d5a3cae336ad2573b205f57af6"} {"level":"info","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89ab29e3bd710b6d77daa98257dfa2a5e1d014d5a3cae336ad2573b205f57af6"} {"level":"debug","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:52:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:52:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:52:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:52:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c"} {"level":"info","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89ab29e3bd710b6d77daa98257dfa2a5e1d014d5a3cae336ad2573b205f57af6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:52:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:52:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89ab29e3bd710b6d77daa98257dfa2a5e1d014d5a3cae336ad2573b205f57af6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c"} {"level":"info","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89ab29e3bd710b6d77daa98257dfa2a5e1d014d5a3cae336ad2573b205f57af6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89ab29e3bd710b6d77daa98257dfa2a5e1d014d5a3cae336ad2573b205f57af6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c"} {"level":"debug","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:52:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:52:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89ab29e3bd710b6d77daa98257dfa2a5e1d014d5a3cae336ad2573b205f57af6"} {"level":"debug","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:52:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:52:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c"} {"level":"debug","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:52:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:52:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:52:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:52:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07"} {"level":"error","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07"} {"level":"debug","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5f86d90f9f74dcabfbc430bf86cc9b51fc274bfad1d655dcc817b7f5c5ec380","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:52:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:52:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5f86d90f9f74dcabfbc430bf86cc9b51fc274bfad1d655dcc817b7f5c5ec380","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:52:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:52:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5f86d90f9f74dcabfbc430bf86cc9b51fc274bfad1d655dcc817b7f5c5ec380"} {"level":"info","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5f86d90f9f74dcabfbc430bf86cc9b51fc274bfad1d655dcc817b7f5c5ec380","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5f86d90f9f74dcabfbc430bf86cc9b51fc274bfad1d655dcc817b7f5c5ec380"} {"level":"debug","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5f86d90f9f74dcabfbc430bf86cc9b51fc274bfad1d655dcc817b7f5c5ec380","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:52:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:52:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5f86d90f9f74dcabfbc430bf86cc9b51fc274bfad1d655dcc817b7f5c5ec380"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07"} {"level":"info","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5f86d90f9f74dcabfbc430bf86cc9b51fc274bfad1d655dcc817b7f5c5ec380","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5f86d90f9f74dcabfbc430bf86cc9b51fc274bfad1d655dcc817b7f5c5ec380","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5f86d90f9f74dcabfbc430bf86cc9b51fc274bfad1d655dcc817b7f5c5ec380"} {"level":"debug","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"425a4a7b66f4735588e799427f21ef955aec14418f35a368a7f8f926914c2b43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:52:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:52:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"425a4a7b66f4735588e799427f21ef955aec14418f35a368a7f8f926914c2b43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"425a4a7b66f4735588e799427f21ef955aec14418f35a368a7f8f926914c2b43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:52:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:52:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/425a4a7b66f4735588e799427f21ef955aec14418f35a368a7f8f926914c2b43"} {"level":"info","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"425a4a7b66f4735588e799427f21ef955aec14418f35a368a7f8f926914c2b43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"425a4a7b66f4735588e799427f21ef955aec14418f35a368a7f8f926914c2b43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:52:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:52:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"425a4a7b66f4735588e799427f21ef955aec14418f35a368a7f8f926914c2b43","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"425a4a7b66f4735588e799427f21ef955aec14418f35a368a7f8f926914c2b43\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"425a4a7b66f4735588e799427f21ef955aec14418f35a368a7f8f926914c2b43","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/425a4a7b66f4735588e799427f21ef955aec14418f35a368a7f8f926914c2b43"} {"level":"debug","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"425a4a7b66f4735588e799427f21ef955aec14418f35a368a7f8f926914c2b43","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/425a4a7b66f4735588e799427f21ef955aec14418f35a368a7f8f926914c2b43"} {"level":"debug","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc2686f809ef511f320800989f88b2917ea4ef710cf35cabb9c946c18b0603af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:52:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:52:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc2686f809ef511f320800989f88b2917ea4ef710cf35cabb9c946c18b0603af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73653ac8666fcd79b5d78d07300f1788de2c35ef7168a1a4bda9693c80a0cc77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:52:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:52:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc2686f809ef511f320800989f88b2917ea4ef710cf35cabb9c946c18b0603af"} {"level":"info","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73653ac8666fcd79b5d78d07300f1788de2c35ef7168a1a4bda9693c80a0cc77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc2686f809ef511f320800989f88b2917ea4ef710cf35cabb9c946c18b0603af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:52:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:52:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc2686f809ef511f320800989f88b2917ea4ef710cf35cabb9c946c18b0603af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73653ac8666fcd79b5d78d07300f1788de2c35ef7168a1a4bda9693c80a0cc77"} {"level":"info","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc2686f809ef511f320800989f88b2917ea4ef710cf35cabb9c946c18b0603af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"425a4a7b66f4735588e799427f21ef955aec14418f35a368a7f8f926914c2b43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:52:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:52:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["425a4a7b66f4735588e799427f21ef955aec14418f35a368a7f8f926914c2b43"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc2686f809ef511f320800989f88b2917ea4ef710cf35cabb9c946c18b0603af"} {"level":"info","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"425a4a7b66f4735588e799427f21ef955aec14418f35a368a7f8f926914c2b43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73653ac8666fcd79b5d78d07300f1788de2c35ef7168a1a4bda9693c80a0cc77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:52:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:52:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73653ac8666fcd79b5d78d07300f1788de2c35ef7168a1a4bda9693c80a0cc77"} {"level":"info","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73653ac8666fcd79b5d78d07300f1788de2c35ef7168a1a4bda9693c80a0cc77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc2686f809ef511f320800989f88b2917ea4ef710cf35cabb9c946c18b0603af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:52:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:52:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc2686f809ef511f320800989f88b2917ea4ef710cf35cabb9c946c18b0603af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"425a4a7b66f4735588e799427f21ef955aec14418f35a368a7f8f926914c2b43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73653ac8666fcd79b5d78d07300f1788de2c35ef7168a1a4bda9693c80a0cc77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:52:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:52:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73653ac8666fcd79b5d78d07300f1788de2c35ef7168a1a4bda9693c80a0cc77"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc2686f809ef511f320800989f88b2917ea4ef710cf35cabb9c946c18b0603af"} {"level":"info","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73653ac8666fcd79b5d78d07300f1788de2c35ef7168a1a4bda9693c80a0cc77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc2686f809ef511f320800989f88b2917ea4ef710cf35cabb9c946c18b0603af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:52:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:52:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc2686f809ef511f320800989f88b2917ea4ef710cf35cabb9c946c18b0603af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc2686f809ef511f320800989f88b2917ea4ef710cf35cabb9c946c18b0603af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73653ac8666fcd79b5d78d07300f1788de2c35ef7168a1a4bda9693c80a0cc77","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/425a4a7b66f4735588e799427f21ef955aec14418f35a368a7f8f926914c2b43"} {"level":"debug","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc2686f809ef511f320800989f88b2917ea4ef710cf35cabb9c946c18b0603af","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73653ac8666fcd79b5d78d07300f1788de2c35ef7168a1a4bda9693c80a0cc77"} {"level":"info","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc2686f809ef511f320800989f88b2917ea4ef710cf35cabb9c946c18b0603af"} {"level":"debug","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f216f7ef871a1c96d21302b0eda9b2cb2dc9ae53abfb766b562ab6d8def1d763","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:52:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:52:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f216f7ef871a1c96d21302b0eda9b2cb2dc9ae53abfb766b562ab6d8def1d763","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f216f7ef871a1c96d21302b0eda9b2cb2dc9ae53abfb766b562ab6d8def1d763","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cdfe58fa7802314967f1cd2147f149066b2fb83578f677f06724f33d6efa449","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:52:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:52:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f216f7ef871a1c96d21302b0eda9b2cb2dc9ae53abfb766b562ab6d8def1d763"} {"level":"info","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cdfe58fa7802314967f1cd2147f149066b2fb83578f677f06724f33d6efa449","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f216f7ef871a1c96d21302b0eda9b2cb2dc9ae53abfb766b562ab6d8def1d763","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:52:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:52:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f216f7ef871a1c96d21302b0eda9b2cb2dc9ae53abfb766b562ab6d8def1d763"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cdfe58fa7802314967f1cd2147f149066b2fb83578f677f06724f33d6efa449"} {"level":"info","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f216f7ef871a1c96d21302b0eda9b2cb2dc9ae53abfb766b562ab6d8def1d763","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cdfe58fa7802314967f1cd2147f149066b2fb83578f677f06724f33d6efa449","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:52:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:52:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1cdfe58fa7802314967f1cd2147f149066b2fb83578f677f06724f33d6efa449"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f216f7ef871a1c96d21302b0eda9b2cb2dc9ae53abfb766b562ab6d8def1d763"} {"level":"info","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cdfe58fa7802314967f1cd2147f149066b2fb83578f677f06724f33d6efa449","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f216f7ef871a1c96d21302b0eda9b2cb2dc9ae53abfb766b562ab6d8def1d763","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cdfe58fa7802314967f1cd2147f149066b2fb83578f677f06724f33d6efa449","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:52:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:52:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cdfe58fa7802314967f1cd2147f149066b2fb83578f677f06724f33d6efa449"} {"level":"info","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cdfe58fa7802314967f1cd2147f149066b2fb83578f677f06724f33d6efa449","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cdfe58fa7802314967f1cd2147f149066b2fb83578f677f06724f33d6efa449","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:52:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:52:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1cdfe58fa7802314967f1cd2147f149066b2fb83578f677f06724f33d6efa449"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cdfe58fa7802314967f1cd2147f149066b2fb83578f677f06724f33d6efa449","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cdfe58fa7802314967f1cd2147f149066b2fb83578f677f06724f33d6efa449","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:52:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:52:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1cdfe58fa7802314967f1cd2147f149066b2fb83578f677f06724f33d6efa449"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f216f7ef871a1c96d21302b0eda9b2cb2dc9ae53abfb766b562ab6d8def1d763"} {"level":"error","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1cdfe58fa7802314967f1cd2147f149066b2fb83578f677f06724f33d6efa449","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1cdfe58fa7802314967f1cd2147f149066b2fb83578f677f06724f33d6efa449\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cdfe58fa7802314967f1cd2147f149066b2fb83578f677f06724f33d6efa449","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:52:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:52:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cdfe58fa7802314967f1cd2147f149066b2fb83578f677f06724f33d6efa449","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cdfe58fa7802314967f1cd2147f149066b2fb83578f677f06724f33d6efa449","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:52:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:52:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cdfe58fa7802314967f1cd2147f149066b2fb83578f677f06724f33d6efa449"} {"level":"error","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1cdfe58fa7802314967f1cd2147f149066b2fb83578f677f06724f33d6efa449","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1cdfe58fa7802314967f1cd2147f149066b2fb83578f677f06724f33d6efa449\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cdfe58fa7802314967f1cd2147f149066b2fb83578f677f06724f33d6efa449","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cdfe58fa7802314967f1cd2147f149066b2fb83578f677f06724f33d6efa449","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:52:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cdfe58fa7802314967f1cd2147f149066b2fb83578f677f06724f33d6efa449"} {"level":"debug","ts":"2026-07-24T17:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cdfe58fa7802314967f1cd2147f149066b2fb83578f677f06724f33d6efa449","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:52:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:52:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1cdfe58fa7802314967f1cd2147f149066b2fb83578f677f06724f33d6efa449"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cdfe58fa7802314967f1cd2147f149066b2fb83578f677f06724f33d6efa449","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cdfe58fa7802314967f1cd2147f149066b2fb83578f677f06724f33d6efa449","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:52:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:52:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cdfe58fa7802314967f1cd2147f149066b2fb83578f677f06724f33d6efa449","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cdfe58fa7802314967f1cd2147f149066b2fb83578f677f06724f33d6efa449","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cdfe58fa7802314967f1cd2147f149066b2fb83578f677f06724f33d6efa449","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cdfe58fa7802314967f1cd2147f149066b2fb83578f677f06724f33d6efa449"} {"level":"debug","ts":"2026-07-24T17:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cdfe58fa7802314967f1cd2147f149066b2fb83578f677f06724f33d6efa449","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7404f275f657c4b6d31b159801ccdcdb2d6c89aad1172f4338d1ee7eb30d432d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:52:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:52:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cdfe58fa7802314967f1cd2147f149066b2fb83578f677f06724f33d6efa449"} {"level":"info","ts":"2026-07-24T17:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7404f275f657c4b6d31b159801ccdcdb2d6c89aad1172f4338d1ee7eb30d432d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1cdfe58fa7802314967f1cd2147f149066b2fb83578f677f06724f33d6efa449","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:52:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:52:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1cdfe58fa7802314967f1cd2147f149066b2fb83578f677f06724f33d6efa449"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1cdfe58fa7802314967f1cd2147f149066b2fb83578f677f06724f33d6efa449","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7404f275f657c4b6d31b159801ccdcdb2d6c89aad1172f4338d1ee7eb30d432d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:52:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:52:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7404f275f657c4b6d31b159801ccdcdb2d6c89aad1172f4338d1ee7eb30d432d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1cdfe58fa7802314967f1cd2147f149066b2fb83578f677f06724f33d6efa449","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7404f275f657c4b6d31b159801ccdcdb2d6c89aad1172f4338d1ee7eb30d432d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7404f275f657c4b6d31b159801ccdcdb2d6c89aad1172f4338d1ee7eb30d432d"} {"level":"debug","ts":"2026-07-24T17:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7404f275f657c4b6d31b159801ccdcdb2d6c89aad1172f4338d1ee7eb30d432d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:52:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:52:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7404f275f657c4b6d31b159801ccdcdb2d6c89aad1172f4338d1ee7eb30d432d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7404f275f657c4b6d31b159801ccdcdb2d6c89aad1172f4338d1ee7eb30d432d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7404f275f657c4b6d31b159801ccdcdb2d6c89aad1172f4338d1ee7eb30d432d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1cdfe58fa7802314967f1cd2147f149066b2fb83578f677f06724f33d6efa449"} {"level":"debug","ts":"2026-07-24T17:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caed356d08f10d644336ef04271d777083d235e6f704a83e706ec7294e204748","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:52:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:52:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7404f275f657c4b6d31b159801ccdcdb2d6c89aad1172f4338d1ee7eb30d432d"} {"level":"info","ts":"2026-07-24T17:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caed356d08f10d644336ef04271d777083d235e6f704a83e706ec7294e204748","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:52:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:52:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caed356d08f10d644336ef04271d777083d235e6f704a83e706ec7294e204748"} {"level":"info","ts":"2026-07-24T17:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caed356d08f10d644336ef04271d777083d235e6f704a83e706ec7294e204748","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:52:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:52:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["caed356d08f10d644336ef04271d777083d235e6f704a83e706ec7294e204748"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caed356d08f10d644336ef04271d777083d235e6f704a83e706ec7294e204748","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:52:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:52:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325"} {"level":"info","ts":"2026-07-24T17:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caed356d08f10d644336ef04271d777083d235e6f704a83e706ec7294e204748","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:52:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:52:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caed356d08f10d644336ef04271d777083d235e6f704a83e706ec7294e204748","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:52:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:52:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caed356d08f10d644336ef04271d777083d235e6f704a83e706ec7294e204748"} {"level":"info","ts":"2026-07-24T17:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caed356d08f10d644336ef04271d777083d235e6f704a83e706ec7294e204748","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:52:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:52:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["caed356d08f10d644336ef04271d777083d235e6f704a83e706ec7294e204748"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325"} {"level":"info","ts":"2026-07-24T17:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caed356d08f10d644336ef04271d777083d235e6f704a83e706ec7294e204748","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caed356d08f10d644336ef04271d777083d235e6f704a83e706ec7294e204748","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:52:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:52:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caed356d08f10d644336ef04271d777083d235e6f704a83e706ec7294e204748","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caed356d08f10d644336ef04271d777083d235e6f704a83e706ec7294e204748","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caed356d08f10d644336ef04271d777083d235e6f704a83e706ec7294e204748","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caed356d08f10d644336ef04271d777083d235e6f704a83e706ec7294e204748"} {"level":"debug","ts":"2026-07-24T17:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caed356d08f10d644336ef04271d777083d235e6f704a83e706ec7294e204748","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:52:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:52:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["caed356d08f10d644336ef04271d777083d235e6f704a83e706ec7294e204748"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325"} {"level":"info","ts":"2026-07-24T17:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caed356d08f10d644336ef04271d777083d235e6f704a83e706ec7294e204748","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caed356d08f10d644336ef04271d777083d235e6f704a83e706ec7294e204748","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:52:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:52:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caed356d08f10d644336ef04271d777083d235e6f704a83e706ec7294e204748"} {"level":"info","ts":"2026-07-24T17:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caed356d08f10d644336ef04271d777083d235e6f704a83e706ec7294e204748","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caed356d08f10d644336ef04271d777083d235e6f704a83e706ec7294e204748","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caed356d08f10d644336ef04271d777083d235e6f704a83e706ec7294e204748","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caed356d08f10d644336ef04271d777083d235e6f704a83e706ec7294e204748"} {"level":"debug","ts":"2026-07-24T17:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caed356d08f10d644336ef04271d777083d235e6f704a83e706ec7294e204748","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caed356d08f10d644336ef04271d777083d235e6f704a83e706ec7294e204748"} {"level":"debug","ts":"2026-07-24T17:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caed356d08f10d644336ef04271d777083d235e6f704a83e706ec7294e204748","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:52:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:52:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["caed356d08f10d644336ef04271d777083d235e6f704a83e706ec7294e204748"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caed356d08f10d644336ef04271d777083d235e6f704a83e706ec7294e204748","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caed356d08f10d644336ef04271d777083d235e6f704a83e706ec7294e204748","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:52:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caed356d08f10d644336ef04271d777083d235e6f704a83e706ec7294e204748"} {"level":"info","ts":"2026-07-24T17:52:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"335c42ff-1c00-4d9c-8ac6-6b56fae43892","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:52950","PortSpecifier":{"PortValue":52950}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"335c42ff-1c00-4d9c-8ac6-6b56fae43892","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-bb94b3.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:52:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"335c42ff-1c00-4d9c-8ac6-6b56fae43892","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:52950","PortSpecifier":{"PortValue":52950}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915542,"nanos":857077233},"http":{"id":"335c42ff-1c00-4d9c-8ac6-6b56fae43892","method":"POST","headers":{":authority":"e2e-shared-a-bb94b3.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:52:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"335c42ff-1c00-4d9c-8ac6-6b56fae43892","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T17:52:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"335c42ff-1c00-4d9c-8ac6-6b56fae43892","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"badbe5d4-7ab5-425e-9873-63296dbdc8e7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2af0cd97-f569-450c-a76b-6c8d1b91d569"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/69d61257011a"]}} {"level":"debug","ts":"2026-07-24T17:52:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"335c42ff-1c00-4d9c-8ac6-6b56fae43892","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/69d61257011a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2af0cd97-f569-450c-a76b-6c8d1b91d569"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"badbe5d4-7ab5-425e-9873-63296dbdc8e7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f3b9b9d1fe514ee98475d28c6dc78ebaf5e9456a9d22de3344d47e2334ec0b02"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bb94b3.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:52:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"335c42ff-1c00-4d9c-8ac6-6b56fae43892","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:52:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"335c42ff-1c00-4d9c-8ac6-6b56fae43892","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:52:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"335c42ff-1c00-4d9c-8ac6-6b56fae43892","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bb94b3/auth-test-model-bb94b3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bb94b3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:52:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"335c42ff-1c00-4d9c-8ac6-6b56fae43892","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T17:52:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"335c42ff-1c00-4d9c-8ac6-6b56fae43892","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:52:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"335c42ff-1c00-4d9c-8ac6-6b56fae43892","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T17:52:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"335c42ff-1c00-4d9c-8ac6-6b56fae43892","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:52:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"335c42ff-1c00-4d9c-8ac6-6b56fae43892","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:52:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e157187d-6567-4798-870b-258f55dc53a2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34484","PortSpecifier":{"PortValue":34484}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e157187d-6567-4798-870b-258f55dc53a2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-5c7cfc.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:52:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e157187d-6567-4798-870b-258f55dc53a2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34484","PortSpecifier":{"PortValue":34484}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915542,"nanos":891001205},"http":{"id":"e157187d-6567-4798-870b-258f55dc53a2","method":"POST","headers":{":authority":"e2e-shared-b-5c7cfc.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:52:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e157187d-6567-4798-870b-258f55dc53a2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T17:52:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e157187d-6567-4798-870b-258f55dc53a2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"badbe5d4-7ab5-425e-9873-63296dbdc8e7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2af0cd97-f569-450c-a76b-6c8d1b91d569"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/69d61257011a"]}} {"level":"debug","ts":"2026-07-24T17:52:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e157187d-6567-4798-870b-258f55dc53a2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/69d61257011a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2af0cd97-f569-450c-a76b-6c8d1b91d569"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"badbe5d4-7ab5-425e-9873-63296dbdc8e7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-5c7cfc.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:52:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e157187d-6567-4798-870b-258f55dc53a2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:52:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e157187d-6567-4798-870b-258f55dc53a2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:52:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e157187d-6567-4798-870b-258f55dc53a2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5c7cfc/auth-test-model-5c7cfc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-5c7cfc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:52:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e157187d-6567-4798-870b-258f55dc53a2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T17:52:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e157187d-6567-4798-870b-258f55dc53a2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:52:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e157187d-6567-4798-870b-258f55dc53a2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T17:52:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e157187d-6567-4798-870b-258f55dc53a2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:52:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e157187d-6567-4798-870b-258f55dc53a2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:52:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a536d28-b81f-414f-8219-c0d65153f222","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:52960","PortSpecifier":{"PortValue":52960}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6a536d28-b81f-414f-8219-c0d65153f222","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-bb94b3.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:52:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a536d28-b81f-414f-8219-c0d65153f222","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:52960","PortSpecifier":{"PortValue":52960}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915542,"nanos":930437828},"http":{"id":"6a536d28-b81f-414f-8219-c0d65153f222","method":"POST","headers":{":authority":"e2e-shared-a-bb94b3.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:52:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6a536d28-b81f-414f-8219-c0d65153f222","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-dN1JMWs86YZFW5DP_blNzZuUH0Ml4N06bnFGPRa4UcUrq3fVuBfZTPPyMQw8"} {"level":"debug","ts":"2026-07-24T17:52:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6a536d28-b81f-414f-8219-c0d65153f222","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bb94b3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-dN1JMWs86YZFW5DP_blNzZuUH0Ml4N06bnFGPRa4UcUrq3fVuBfZTPPyMQw8\"}"} {"level":"debug","ts":"2026-07-24T17:52:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6a536d28-b81f-414f-8219-c0d65153f222","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bb94b3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d6864acb-6ea2-420d-bd13-664600639ac5","keyName":"e2e-auth-iso-a-cc8ef4","subscription":"e2e-auth-iso-d30f4b","tenant":"e2e-shared-a-bb94b3","userId":"d6864acb-6ea2-420d-bd13-664600639ac5","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T17:52:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6a536d28-b81f-414f-8219-c0d65153f222","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:52:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a536d28-b81f-414f-8219-c0d65153f222","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:52:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a536d28-b81f-414f-8219-c0d65153f222","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:52:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a536d28-b81f-414f-8219-c0d65153f222","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bb94b3/auth-test-model-bb94b3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bb94b3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:52:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a536d28-b81f-414f-8219-c0d65153f222","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:52:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6a536d28-b81f-414f-8219-c0d65153f222","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-24T17:52:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a536d28-b81f-414f-8219-c0d65153f222","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-d30f4b"} {"level":"debug","ts":"2026-07-24T17:52:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a536d28-b81f-414f-8219-c0d65153f222","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T17:52:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a536d28-b81f-414f-8219-c0d65153f222","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:52:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a536d28-b81f-414f-8219-c0d65153f222","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:52:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f5f86d90f9f74dcabfbc430bf86cc9b51fc274bfad1d655dcc817b7f5c5ec380"} {"level":"info","ts":"2026-07-24T17:52:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9b708d3409dedceffe5e0cf61c5a874790de9c6f2af3f955df12fda622341b5c"} {"level":"info","ts":"2026-07-24T17:52:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cb4913d51274dffd55c537812de8c2c5adba414e70864116e17a0564f0f92712"} {"level":"info","ts":"2026-07-24T17:52:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b0d635f542d92c291b8d79fb8d0133f336818602947a957765ae87b4d7e1b325"} {"level":"info","ts":"2026-07-24T17:52:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c"} {"level":"info","ts":"2026-07-24T17:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/caed356d08f10d644336ef04271d777083d235e6f704a83e706ec7294e204748"} {"level":"info","ts":"2026-07-24T17:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fb2b0926d1abffed2ee74c61f35a602adc396ee1603f246f87fa455b249b15ae"} {"level":"info","ts":"2026-07-24T17:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6c6d3c053f47668b4f921b5ce410923c2dddbe475545c8f6f86f85a438b2939f"} {"level":"info","ts":"2026-07-24T17:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/55254dadd0bb0df309bc7dd8518ec5dae1b9dafabdd652e3795f120156b1fa28"} {"level":"info","ts":"2026-07-24T17:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bd631b7dcdefec32dd5b5d4282a23cc02b031fe7b9e758d522e61204b44ee8f5"} {"level":"info","ts":"2026-07-24T17:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cc2686f809ef511f320800989f88b2917ea4ef710cf35cabb9c946c18b0603af"} {"level":"info","ts":"2026-07-24T17:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/89ab29e3bd710b6d77daa98257dfa2a5e1d014d5a3cae336ad2573b205f57af6"} {"level":"info","ts":"2026-07-24T17:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8a772291490ece6aa9fa3b9a4b812762a0270defd03aa515e26a9fa0db4ce4ef"} {"level":"info","ts":"2026-07-24T17:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9df57bab60148e217eee288eb72349758654a9fd91d79d23d2e37da739d8430b"} {"level":"info","ts":"2026-07-24T17:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/72e678bd14c2c0d1aaa99d260bb904d384a2ca94ce5af71f91af523ef3767af4"} {"level":"info","ts":"2026-07-24T17:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/49222ae3b40ae2b48d37b33c4aaa9050268a65c4506e625ad6814f8ce71655ae"} {"level":"info","ts":"2026-07-24T17:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7404f275f657c4b6d31b159801ccdcdb2d6c89aad1172f4338d1ee7eb30d432d"} {"level":"info","ts":"2026-07-24T17:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f216f7ef871a1c96d21302b0eda9b2cb2dc9ae53abfb766b562ab6d8def1d763"} {"level":"info","ts":"2026-07-24T17:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ff5b385ee16d96deff3882d13bc4001b6a95cfd00c8ae1ae2a5dbc334c7d8ed5"} {"level":"info","ts":"2026-07-24T17:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1cdfe58fa7802314967f1cd2147f149066b2fb83578f677f06724f33d6efa449"} {"level":"info","ts":"2026-07-24T17:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/425a4a7b66f4735588e799427f21ef955aec14418f35a368a7f8f926914c2b43"} {"level":"info","ts":"2026-07-24T17:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/73653ac8666fcd79b5d78d07300f1788de2c35ef7168a1a4bda9693c80a0cc77"} {"level":"info","ts":"2026-07-24T17:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07"} {"level":"info","ts":"2026-07-24T17:52:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f3b9b9d1fe514ee98475d28c6dc78ebaf5e9456a9d22de3344d47e2334ec0b02"} {"level":"debug","ts":"2026-07-24T17:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"974b885f881b0089fb6d83bd185e454f13b8d2cbda9ccbce0dfc1cf2598b8c96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:53:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:53:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"974b885f881b0089fb6d83bd185e454f13b8d2cbda9ccbce0dfc1cf2598b8c96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"974b885f881b0089fb6d83bd185e454f13b8d2cbda9ccbce0dfc1cf2598b8c96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"974b885f881b0089fb6d83bd185e454f13b8d2cbda9ccbce0dfc1cf2598b8c96","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/974b885f881b0089fb6d83bd185e454f13b8d2cbda9ccbce0dfc1cf2598b8c96"} {"level":"debug","ts":"2026-07-24T17:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"974b885f881b0089fb6d83bd185e454f13b8d2cbda9ccbce0dfc1cf2598b8c96","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/974b885f881b0089fb6d83bd185e454f13b8d2cbda9ccbce0dfc1cf2598b8c96"} {"level":"debug","ts":"2026-07-24T17:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"974b885f881b0089fb6d83bd185e454f13b8d2cbda9ccbce0dfc1cf2598b8c96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:53:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:53:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["974b885f881b0089fb6d83bd185e454f13b8d2cbda9ccbce0dfc1cf2598b8c96"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"974b885f881b0089fb6d83bd185e454f13b8d2cbda9ccbce0dfc1cf2598b8c96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"974b885f881b0089fb6d83bd185e454f13b8d2cbda9ccbce0dfc1cf2598b8c96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73653ac8666fcd79b5d78d07300f1788de2c35ef7168a1a4bda9693c80a0cc77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:53:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:53:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73653ac8666fcd79b5d78d07300f1788de2c35ef7168a1a4bda9693c80a0cc77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73653ac8666fcd79b5d78d07300f1788de2c35ef7168a1a4bda9693c80a0cc77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73653ac8666fcd79b5d78d07300f1788de2c35ef7168a1a4bda9693c80a0cc77","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/974b885f881b0089fb6d83bd185e454f13b8d2cbda9ccbce0dfc1cf2598b8c96"} {"level":"debug","ts":"2026-07-24T17:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73653ac8666fcd79b5d78d07300f1788de2c35ef7168a1a4bda9693c80a0cc77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:53:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:53:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73653ac8666fcd79b5d78d07300f1788de2c35ef7168a1a4bda9693c80a0cc77"} {"level":"info","ts":"2026-07-24T17:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73653ac8666fcd79b5d78d07300f1788de2c35ef7168a1a4bda9693c80a0cc77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73653ac8666fcd79b5d78d07300f1788de2c35ef7168a1a4bda9693c80a0cc77","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73653ac8666fcd79b5d78d07300f1788de2c35ef7168a1a4bda9693c80a0cc77"} {"level":"debug","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73653ac8666fcd79b5d78d07300f1788de2c35ef7168a1a4bda9693c80a0cc77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:53:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:53:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73653ac8666fcd79b5d78d07300f1788de2c35ef7168a1a4bda9693c80a0cc77"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73653ac8666fcd79b5d78d07300f1788de2c35ef7168a1a4bda9693c80a0cc77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73653ac8666fcd79b5d78d07300f1788de2c35ef7168a1a4bda9693c80a0cc77","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73653ac8666fcd79b5d78d07300f1788de2c35ef7168a1a4bda9693c80a0cc77"} {"level":"debug","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89ab29e3bd710b6d77daa98257dfa2a5e1d014d5a3cae336ad2573b205f57af6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:53:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:53:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89ab29e3bd710b6d77daa98257dfa2a5e1d014d5a3cae336ad2573b205f57af6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89ab29e3bd710b6d77daa98257dfa2a5e1d014d5a3cae336ad2573b205f57af6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89ab29e3bd710b6d77daa98257dfa2a5e1d014d5a3cae336ad2573b205f57af6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89ab29e3bd710b6d77daa98257dfa2a5e1d014d5a3cae336ad2573b205f57af6"} {"level":"debug","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89ab29e3bd710b6d77daa98257dfa2a5e1d014d5a3cae336ad2573b205f57af6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89ab29e3bd710b6d77daa98257dfa2a5e1d014d5a3cae336ad2573b205f57af6"} {"level":"debug","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89ab29e3bd710b6d77daa98257dfa2a5e1d014d5a3cae336ad2573b205f57af6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:53:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:53:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89ab29e3bd710b6d77daa98257dfa2a5e1d014d5a3cae336ad2573b205f57af6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89ab29e3bd710b6d77daa98257dfa2a5e1d014d5a3cae336ad2573b205f57af6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89ab29e3bd710b6d77daa98257dfa2a5e1d014d5a3cae336ad2573b205f57af6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3b9b9d1fe514ee98475d28c6dc78ebaf5e9456a9d22de3344d47e2334ec0b02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:53:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:53:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3b9b9d1fe514ee98475d28c6dc78ebaf5e9456a9d22de3344d47e2334ec0b02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3b9b9d1fe514ee98475d28c6dc78ebaf5e9456a9d22de3344d47e2334ec0b02","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89ab29e3bd710b6d77daa98257dfa2a5e1d014d5a3cae336ad2573b205f57af6"} {"level":"debug","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3b9b9d1fe514ee98475d28c6dc78ebaf5e9456a9d22de3344d47e2334ec0b02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:53:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:53:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3b9b9d1fe514ee98475d28c6dc78ebaf5e9456a9d22de3344d47e2334ec0b02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3b9b9d1fe514ee98475d28c6dc78ebaf5e9456a9d22de3344d47e2334ec0b02","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3b9b9d1fe514ee98475d28c6dc78ebaf5e9456a9d22de3344d47e2334ec0b02"} {"level":"debug","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3b9b9d1fe514ee98475d28c6dc78ebaf5e9456a9d22de3344d47e2334ec0b02","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3b9b9d1fe514ee98475d28c6dc78ebaf5e9456a9d22de3344d47e2334ec0b02"} {"level":"debug","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:53:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:53:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c"} {"level":"debug","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3b9b9d1fe514ee98475d28c6dc78ebaf5e9456a9d22de3344d47e2334ec0b02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:53:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:53:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3b9b9d1fe514ee98475d28c6dc78ebaf5e9456a9d22de3344d47e2334ec0b02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c"} {"level":"info","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3b9b9d1fe514ee98475d28c6dc78ebaf5e9456a9d22de3344d47e2334ec0b02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:53:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:53:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3b9b9d1fe514ee98475d28c6dc78ebaf5e9456a9d22de3344d47e2334ec0b02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:53:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:53:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3b9b9d1fe514ee98475d28c6dc78ebaf5e9456a9d22de3344d47e2334ec0b02"} {"level":"info","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3b9b9d1fe514ee98475d28c6dc78ebaf5e9456a9d22de3344d47e2334ec0b02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:53:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:53:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3b9b9d1fe514ee98475d28c6dc78ebaf5e9456a9d22de3344d47e2334ec0b02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:53:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:53:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3b9b9d1fe514ee98475d28c6dc78ebaf5e9456a9d22de3344d47e2334ec0b02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c"} {"level":"info","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3b9b9d1fe514ee98475d28c6dc78ebaf5e9456a9d22de3344d47e2334ec0b02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:53:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:53:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3b9b9d1fe514ee98475d28c6dc78ebaf5e9456a9d22de3344d47e2334ec0b02"} {"level":"info","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3b9b9d1fe514ee98475d28c6dc78ebaf5e9456a9d22de3344d47e2334ec0b02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff5b385ee16d96deff3882d13bc4001b6a95cfd00c8ae1ae2a5dbc334c7d8ed5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:53:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:53:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff5b385ee16d96deff3882d13bc4001b6a95cfd00c8ae1ae2a5dbc334c7d8ed5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:53:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:53:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c"} {"level":"info","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff5b385ee16d96deff3882d13bc4001b6a95cfd00c8ae1ae2a5dbc334c7d8ed5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:53:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:53:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff5b385ee16d96deff3882d13bc4001b6a95cfd00c8ae1ae2a5dbc334c7d8ed5"} {"level":"info","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff5b385ee16d96deff3882d13bc4001b6a95cfd00c8ae1ae2a5dbc334c7d8ed5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:53:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:53:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff5b385ee16d96deff3882d13bc4001b6a95cfd00c8ae1ae2a5dbc334c7d8ed5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:53:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:53:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff5b385ee16d96deff3882d13bc4001b6a95cfd00c8ae1ae2a5dbc334c7d8ed5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3b9b9d1fe514ee98475d28c6dc78ebaf5e9456a9d22de3344d47e2334ec0b02"} {"level":"info","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff5b385ee16d96deff3882d13bc4001b6a95cfd00c8ae1ae2a5dbc334c7d8ed5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:53:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:53:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c"} {"level":"info","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff5b385ee16d96deff3882d13bc4001b6a95cfd00c8ae1ae2a5dbc334c7d8ed5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:53:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:53:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff5b385ee16d96deff3882d13bc4001b6a95cfd00c8ae1ae2a5dbc334c7d8ed5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:53:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:53:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff5b385ee16d96deff3882d13bc4001b6a95cfd00c8ae1ae2a5dbc334c7d8ed5"} {"level":"info","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9df57bab60148e217eee288eb72349758654a9fd91d79d23d2e37da739d8430b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:53:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:53:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c"} {"level":"info","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9df57bab60148e217eee288eb72349758654a9fd91d79d23d2e37da739d8430b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff5b385ee16d96deff3882d13bc4001b6a95cfd00c8ae1ae2a5dbc334c7d8ed5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:53:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:53:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff5b385ee16d96deff3882d13bc4001b6a95cfd00c8ae1ae2a5dbc334c7d8ed5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9df57bab60148e217eee288eb72349758654a9fd91d79d23d2e37da739d8430b"} {"level":"info","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff5b385ee16d96deff3882d13bc4001b6a95cfd00c8ae1ae2a5dbc334c7d8ed5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9df57bab60148e217eee288eb72349758654a9fd91d79d23d2e37da739d8430b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:53:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:53:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9df57bab60148e217eee288eb72349758654a9fd91d79d23d2e37da739d8430b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9df57bab60148e217eee288eb72349758654a9fd91d79d23d2e37da739d8430b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff5b385ee16d96deff3882d13bc4001b6a95cfd00c8ae1ae2a5dbc334c7d8ed5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:53:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:53:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff5b385ee16d96deff3882d13bc4001b6a95cfd00c8ae1ae2a5dbc334c7d8ed5"} {"level":"info","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff5b385ee16d96deff3882d13bc4001b6a95cfd00c8ae1ae2a5dbc334c7d8ed5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9df57bab60148e217eee288eb72349758654a9fd91d79d23d2e37da739d8430b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff5b385ee16d96deff3882d13bc4001b6a95cfd00c8ae1ae2a5dbc334c7d8ed5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:53:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:53:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff5b385ee16d96deff3882d13bc4001b6a95cfd00c8ae1ae2a5dbc334c7d8ed5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c"} {"level":"info","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff5b385ee16d96deff3882d13bc4001b6a95cfd00c8ae1ae2a5dbc334c7d8ed5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b708d3409dedceffe5e0cf61c5a874790de9c6f2af3f955df12fda622341b5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:53:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:53:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b708d3409dedceffe5e0cf61c5a874790de9c6f2af3f955df12fda622341b5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff5b385ee16d96deff3882d13bc4001b6a95cfd00c8ae1ae2a5dbc334c7d8ed5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b708d3409dedceffe5e0cf61c5a874790de9c6f2af3f955df12fda622341b5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b708d3409dedceffe5e0cf61c5a874790de9c6f2af3f955df12fda622341b5c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9df57bab60148e217eee288eb72349758654a9fd91d79d23d2e37da739d8430b"} {"level":"debug","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b708d3409dedceffe5e0cf61c5a874790de9c6f2af3f955df12fda622341b5c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff5b385ee16d96deff3882d13bc4001b6a95cfd00c8ae1ae2a5dbc334c7d8ed5"} {"level":"debug","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b708d3409dedceffe5e0cf61c5a874790de9c6f2af3f955df12fda622341b5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:53:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:53:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b708d3409dedceffe5e0cf61c5a874790de9c6f2af3f955df12fda622341b5c"} {"level":"info","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b708d3409dedceffe5e0cf61c5a874790de9c6f2af3f955df12fda622341b5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b708d3409dedceffe5e0cf61c5a874790de9c6f2af3f955df12fda622341b5c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b708d3409dedceffe5e0cf61c5a874790de9c6f2af3f955df12fda622341b5c"} {"level":"debug","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b708d3409dedceffe5e0cf61c5a874790de9c6f2af3f955df12fda622341b5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:53:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:53:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b708d3409dedceffe5e0cf61c5a874790de9c6f2af3f955df12fda622341b5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b708d3409dedceffe5e0cf61c5a874790de9c6f2af3f955df12fda622341b5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04176745144905286bb2c89691cf726f1d7803852fc3298c3278b27915659d15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:53:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:53:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04176745144905286bb2c89691cf726f1d7803852fc3298c3278b27915659d15"} {"level":"info","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04176745144905286bb2c89691cf726f1d7803852fc3298c3278b27915659d15","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b708d3409dedceffe5e0cf61c5a874790de9c6f2af3f955df12fda622341b5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:53:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:53:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b708d3409dedceffe5e0cf61c5a874790de9c6f2af3f955df12fda622341b5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fade40f880a8a912d9e2f36b4607929fa5e9b1b89a6b56757f53114fc8d6e46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:53:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:53:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b708d3409dedceffe5e0cf61c5a874790de9c6f2af3f955df12fda622341b5c"} {"level":"info","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fade40f880a8a912d9e2f36b4607929fa5e9b1b89a6b56757f53114fc8d6e46","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04176745144905286bb2c89691cf726f1d7803852fc3298c3278b27915659d15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:53:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:53:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04176745144905286bb2c89691cf726f1d7803852fc3298c3278b27915659d15"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04176745144905286bb2c89691cf726f1d7803852fc3298c3278b27915659d15","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b708d3409dedceffe5e0cf61c5a874790de9c6f2af3f955df12fda622341b5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:53:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:53:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b708d3409dedceffe5e0cf61c5a874790de9c6f2af3f955df12fda622341b5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fade40f880a8a912d9e2f36b4607929fa5e9b1b89a6b56757f53114fc8d6e46"} {"level":"info","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b708d3409dedceffe5e0cf61c5a874790de9c6f2af3f955df12fda622341b5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fade40f880a8a912d9e2f36b4607929fa5e9b1b89a6b56757f53114fc8d6e46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:53:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:53:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9fade40f880a8a912d9e2f36b4607929fa5e9b1b89a6b56757f53114fc8d6e46"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04176745144905286bb2c89691cf726f1d7803852fc3298c3278b27915659d15"} {"level":"info","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fade40f880a8a912d9e2f36b4607929fa5e9b1b89a6b56757f53114fc8d6e46","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04176745144905286bb2c89691cf726f1d7803852fc3298c3278b27915659d15","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b708d3409dedceffe5e0cf61c5a874790de9c6f2af3f955df12fda622341b5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:53:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:53:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b708d3409dedceffe5e0cf61c5a874790de9c6f2af3f955df12fda622341b5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9fade40f880a8a912d9e2f36b4607929fa5e9b1b89a6b56757f53114fc8d6e46","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b708d3409dedceffe5e0cf61c5a874790de9c6f2af3f955df12fda622341b5c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b708d3409dedceffe5e0cf61c5a874790de9c6f2af3f955df12fda622341b5c"} {"level":"debug","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b708d3409dedceffe5e0cf61c5a874790de9c6f2af3f955df12fda622341b5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:53:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:53:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b708d3409dedceffe5e0cf61c5a874790de9c6f2af3f955df12fda622341b5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b708d3409dedceffe5e0cf61c5a874790de9c6f2af3f955df12fda622341b5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b708d3409dedceffe5e0cf61c5a874790de9c6f2af3f955df12fda622341b5c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fade40f880a8a912d9e2f36b4607929fa5e9b1b89a6b56757f53114fc8d6e46"} {"level":"info","ts":"2026-07-24T17:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b708d3409dedceffe5e0cf61c5a874790de9c6f2af3f955df12fda622341b5c"} {"level":"debug","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2290b90e714b5c332f37d6a6ad89c6da190c342a9aed2e11a1316f23531e7a07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:54:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:54:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2290b90e714b5c332f37d6a6ad89c6da190c342a9aed2e11a1316f23531e7a07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d42231d5203b12bdb65cbd61a5ac78fd8bd423806a90ffeb2f8dde650da42536","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:54:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:54:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2290b90e714b5c332f37d6a6ad89c6da190c342a9aed2e11a1316f23531e7a07"} {"level":"info","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d42231d5203b12bdb65cbd61a5ac78fd8bd423806a90ffeb2f8dde650da42536","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2290b90e714b5c332f37d6a6ad89c6da190c342a9aed2e11a1316f23531e7a07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:54:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:54:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2290b90e714b5c332f37d6a6ad89c6da190c342a9aed2e11a1316f23531e7a07"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d42231d5203b12bdb65cbd61a5ac78fd8bd423806a90ffeb2f8dde650da42536"} {"level":"info","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2290b90e714b5c332f37d6a6ad89c6da190c342a9aed2e11a1316f23531e7a07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d42231d5203b12bdb65cbd61a5ac78fd8bd423806a90ffeb2f8dde650da42536","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:54:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:54:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d42231d5203b12bdb65cbd61a5ac78fd8bd423806a90ffeb2f8dde650da42536"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d42231d5203b12bdb65cbd61a5ac78fd8bd423806a90ffeb2f8dde650da42536","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2290b90e714b5c332f37d6a6ad89c6da190c342a9aed2e11a1316f23531e7a07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:54:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:54:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2290b90e714b5c332f37d6a6ad89c6da190c342a9aed2e11a1316f23531e7a07"} {"level":"info","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2290b90e714b5c332f37d6a6ad89c6da190c342a9aed2e11a1316f23531e7a07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d42231d5203b12bdb65cbd61a5ac78fd8bd423806a90ffeb2f8dde650da42536","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:54:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:54:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d42231d5203b12bdb65cbd61a5ac78fd8bd423806a90ffeb2f8dde650da42536"} {"level":"info","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d42231d5203b12bdb65cbd61a5ac78fd8bd423806a90ffeb2f8dde650da42536","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2290b90e714b5c332f37d6a6ad89c6da190c342a9aed2e11a1316f23531e7a07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d42231d5203b12bdb65cbd61a5ac78fd8bd423806a90ffeb2f8dde650da42536","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:54:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:54:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d42231d5203b12bdb65cbd61a5ac78fd8bd423806a90ffeb2f8dde650da42536"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2290b90e714b5c332f37d6a6ad89c6da190c342a9aed2e11a1316f23531e7a07"} {"level":"info","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d42231d5203b12bdb65cbd61a5ac78fd8bd423806a90ffeb2f8dde650da42536","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8979b2eaf8a85fdc5306c16754f914c5c42988c910974ddd1e978b2fb33b0e53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:54:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:54:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8979b2eaf8a85fdc5306c16754f914c5c42988c910974ddd1e978b2fb33b0e53","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2290b90e714b5c332f37d6a6ad89c6da190c342a9aed2e11a1316f23531e7a07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:54:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:54:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2290b90e714b5c332f37d6a6ad89c6da190c342a9aed2e11a1316f23531e7a07"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d42231d5203b12bdb65cbd61a5ac78fd8bd423806a90ffeb2f8dde650da42536"} {"level":"info","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2290b90e714b5c332f37d6a6ad89c6da190c342a9aed2e11a1316f23531e7a07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d42231d5203b12bdb65cbd61a5ac78fd8bd423806a90ffeb2f8dde650da42536","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ffd1bf5fdd4ffd4014c0bf80b28e0e2ea1dd7e040f9e913eaca9e3085ec3637","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:54:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:54:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8979b2eaf8a85fdc5306c16754f914c5c42988c910974ddd1e978b2fb33b0e53"} {"level":"info","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ffd1bf5fdd4ffd4014c0bf80b28e0e2ea1dd7e040f9e913eaca9e3085ec3637","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8979b2eaf8a85fdc5306c16754f914c5c42988c910974ddd1e978b2fb33b0e53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:54:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:54:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8979b2eaf8a85fdc5306c16754f914c5c42988c910974ddd1e978b2fb33b0e53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8979b2eaf8a85fdc5306c16754f914c5c42988c910974ddd1e978b2fb33b0e53","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2290b90e714b5c332f37d6a6ad89c6da190c342a9aed2e11a1316f23531e7a07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ffd1bf5fdd4ffd4014c0bf80b28e0e2ea1dd7e040f9e913eaca9e3085ec3637","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:54:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:54:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ffd1bf5fdd4ffd4014c0bf80b28e0e2ea1dd7e040f9e913eaca9e3085ec3637"} {"level":"info","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ffd1bf5fdd4ffd4014c0bf80b28e0e2ea1dd7e040f9e913eaca9e3085ec3637","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8979b2eaf8a85fdc5306c16754f914c5c42988c910974ddd1e978b2fb33b0e53","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ffd1bf5fdd4ffd4014c0bf80b28e0e2ea1dd7e040f9e913eaca9e3085ec3637","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:54:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:54:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ffd1bf5fdd4ffd4014c0bf80b28e0e2ea1dd7e040f9e913eaca9e3085ec3637"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d42231d5203b12bdb65cbd61a5ac78fd8bd423806a90ffeb2f8dde650da42536"} {"level":"info","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ffd1bf5fdd4ffd4014c0bf80b28e0e2ea1dd7e040f9e913eaca9e3085ec3637","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ffd1bf5fdd4ffd4014c0bf80b28e0e2ea1dd7e040f9e913eaca9e3085ec3637","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:54:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:54:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ffd1bf5fdd4ffd4014c0bf80b28e0e2ea1dd7e040f9e913eaca9e3085ec3637"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1ffd1bf5fdd4ffd4014c0bf80b28e0e2ea1dd7e040f9e913eaca9e3085ec3637","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1ffd1bf5fdd4ffd4014c0bf80b28e0e2ea1dd7e040f9e913eaca9e3085ec3637\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:54:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:54:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2290b90e714b5c332f37d6a6ad89c6da190c342a9aed2e11a1316f23531e7a07"} {"level":"info","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8979b2eaf8a85fdc5306c16754f914c5c42988c910974ddd1e978b2fb33b0e53"} {"level":"info","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ffd1bf5fdd4ffd4014c0bf80b28e0e2ea1dd7e040f9e913eaca9e3085ec3637","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:54:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:54:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ffd1bf5fdd4ffd4014c0bf80b28e0e2ea1dd7e040f9e913eaca9e3085ec3637"} {"level":"info","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ffd1bf5fdd4ffd4014c0bf80b28e0e2ea1dd7e040f9e913eaca9e3085ec3637","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae4c7b1e199b773fa68992189948b0d9f8c87d8c7c82107e275d5bbf345c7117","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:54:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:54:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07"} {"level":"info","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae4c7b1e199b773fa68992189948b0d9f8c87d8c7c82107e275d5bbf345c7117","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:54:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:54:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae4c7b1e199b773fa68992189948b0d9f8c87d8c7c82107e275d5bbf345c7117"} {"level":"info","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"279584dfbe9fcf1f993847be29e04ee83ec5f34df82e459ec0cdaf8a76b63ede","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:54:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:54:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/279584dfbe9fcf1f993847be29e04ee83ec5f34df82e459ec0cdaf8a76b63ede"} {"level":"info","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ffd1bf5fdd4ffd4014c0bf80b28e0e2ea1dd7e040f9e913eaca9e3085ec3637"} {"level":"info","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"279584dfbe9fcf1f993847be29e04ee83ec5f34df82e459ec0cdaf8a76b63ede","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ffd1bf5fdd4ffd4014c0bf80b28e0e2ea1dd7e040f9e913eaca9e3085ec3637","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:54:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:54:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ffd1bf5fdd4ffd4014c0bf80b28e0e2ea1dd7e040f9e913eaca9e3085ec3637"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae4c7b1e199b773fa68992189948b0d9f8c87d8c7c82107e275d5bbf345c7117"} {"level":"info","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c07aa2f96a768b17d101030f8ab37a3604a90ee077e0efb6cc0f965b06d6caa"} {"level":"info","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ffd1bf5fdd4ffd4014c0bf80b28e0e2ea1dd7e040f9e913eaca9e3085ec3637","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae4c7b1e199b773fa68992189948b0d9f8c87d8c7c82107e275d5bbf345c7117","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:54:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:54:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae4c7b1e199b773fa68992189948b0d9f8c87d8c7c82107e275d5bbf345c7117"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07"} {"level":"info","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f643d1ea356ef515bc3a6289a99807c70b9091153a3085e542bc1ae6e472ba6"} {"level":"info","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8490bb679a55d5eb6085ed4f469e803828346fd2b30de2dc9d55b9a0e36de181"} {"level":"info","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae4c7b1e199b773fa68992189948b0d9f8c87d8c7c82107e275d5bbf345c7117","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c07aa2f96a768b17d101030f8ab37a3604a90ee077e0efb6cc0f965b06d6caa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:54:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:54:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c07aa2f96a768b17d101030f8ab37a3604a90ee077e0efb6cc0f965b06d6caa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/279584dfbe9fcf1f993847be29e04ee83ec5f34df82e459ec0cdaf8a76b63ede"} {"level":"info","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bd7e463a0b77331e3ab9c7f0e1093aca8339f64d6b0e9e95a011613e9e80e0c"} {"level":"info","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c07aa2f96a768b17d101030f8ab37a3604a90ee077e0efb6cc0f965b06d6caa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f643d1ea356ef515bc3a6289a99807c70b9091153a3085e542bc1ae6e472ba6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:54:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:54:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f643d1ea356ef515bc3a6289a99807c70b9091153a3085e542bc1ae6e472ba6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ffd1bf5fdd4ffd4014c0bf80b28e0e2ea1dd7e040f9e913eaca9e3085ec3637"} {"level":"info","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d92ce6aa334d6bab9a6bfc4040d8040b826942d90a99107b17434db601c250c"} {"level":"info","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0103497cda12451b843593328938d6e43592ca47033c704930deda4026a41a8f"} {"level":"info","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f643d1ea356ef515bc3a6289a99807c70b9091153a3085e542bc1ae6e472ba6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8490bb679a55d5eb6085ed4f469e803828346fd2b30de2dc9d55b9a0e36de181","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:54:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:54:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8490bb679a55d5eb6085ed4f469e803828346fd2b30de2dc9d55b9a0e36de181"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e866c8c8890d221103b0441807a4965dfa5f63a3cc13530db9992edd8192c7ad"} {"level":"info","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8490bb679a55d5eb6085ed4f469e803828346fd2b30de2dc9d55b9a0e36de181","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"279584dfbe9fcf1f993847be29e04ee83ec5f34df82e459ec0cdaf8a76b63ede","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:54:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:54:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["279584dfbe9fcf1f993847be29e04ee83ec5f34df82e459ec0cdaf8a76b63ede"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae4c7b1e199b773fa68992189948b0d9f8c87d8c7c82107e275d5bbf345c7117"} {"level":"info","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"279584dfbe9fcf1f993847be29e04ee83ec5f34df82e459ec0cdaf8a76b63ede","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bd7e463a0b77331e3ab9c7f0e1093aca8339f64d6b0e9e95a011613e9e80e0c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:54:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:54:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3bd7e463a0b77331e3ab9c7f0e1093aca8339f64d6b0e9e95a011613e9e80e0c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c07aa2f96a768b17d101030f8ab37a3604a90ee077e0efb6cc0f965b06d6caa"} {"level":"info","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f643d1ea356ef515bc3a6289a99807c70b9091153a3085e542bc1ae6e472ba6"} {"level":"info","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bd7e463a0b77331e3ab9c7f0e1093aca8339f64d6b0e9e95a011613e9e80e0c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ffd1bf5fdd4ffd4014c0bf80b28e0e2ea1dd7e040f9e913eaca9e3085ec3637","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d92ce6aa334d6bab9a6bfc4040d8040b826942d90a99107b17434db601c250c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:54:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:54:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d92ce6aa334d6bab9a6bfc4040d8040b826942d90a99107b17434db601c250c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8490bb679a55d5eb6085ed4f469e803828346fd2b30de2dc9d55b9a0e36de181"} {"level":"info","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/279584dfbe9fcf1f993847be29e04ee83ec5f34df82e459ec0cdaf8a76b63ede"} {"level":"info","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d92ce6aa334d6bab9a6bfc4040d8040b826942d90a99107b17434db601c250c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0103497cda12451b843593328938d6e43592ca47033c704930deda4026a41a8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:54:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:54:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0103497cda12451b843593328938d6e43592ca47033c704930deda4026a41a8f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bd7e463a0b77331e3ab9c7f0e1093aca8339f64d6b0e9e95a011613e9e80e0c"} {"level":"info","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d92ce6aa334d6bab9a6bfc4040d8040b826942d90a99107b17434db601c250c"} {"level":"info","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0103497cda12451b843593328938d6e43592ca47033c704930deda4026a41a8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e866c8c8890d221103b0441807a4965dfa5f63a3cc13530db9992edd8192c7ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:54:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:54:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e866c8c8890d221103b0441807a4965dfa5f63a3cc13530db9992edd8192c7ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0103497cda12451b843593328938d6e43592ca47033c704930deda4026a41a8f"} {"level":"info","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e866c8c8890d221103b0441807a4965dfa5f63a3cc13530db9992edd8192c7ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae4c7b1e199b773fa68992189948b0d9f8c87d8c7c82107e275d5bbf345c7117","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c07aa2f96a768b17d101030f8ab37a3604a90ee077e0efb6cc0f965b06d6caa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f643d1ea356ef515bc3a6289a99807c70b9091153a3085e542bc1ae6e472ba6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8490bb679a55d5eb6085ed4f469e803828346fd2b30de2dc9d55b9a0e36de181","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"279584dfbe9fcf1f993847be29e04ee83ec5f34df82e459ec0cdaf8a76b63ede","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bd7e463a0b77331e3ab9c7f0e1093aca8339f64d6b0e9e95a011613e9e80e0c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d92ce6aa334d6bab9a6bfc4040d8040b826942d90a99107b17434db601c250c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0103497cda12451b843593328938d6e43592ca47033c704930deda4026a41a8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e866c8c8890d221103b0441807a4965dfa5f63a3cc13530db9992edd8192c7ad","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e866c8c8890d221103b0441807a4965dfa5f63a3cc13530db9992edd8192c7ad"} {"level":"info","ts":"2026-07-24T17:54:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"95bc09c2-af55-4350-990a-6a68a56384d8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:57554","PortSpecifier":{"PortValue":57554}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"95bc09c2-af55-4350-990a-6a68a56384d8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-bb94b3.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:54:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"95bc09c2-af55-4350-990a-6a68a56384d8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:57554","PortSpecifier":{"PortValue":57554}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915643,"nanos":605272373},"http":{"id":"95bc09c2-af55-4350-990a-6a68a56384d8","method":"POST","headers":{":authority":"e2e-shared-a-bb94b3.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:54:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"95bc09c2-af55-4350-990a-6a68a56384d8","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T17:54:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"95bc09c2-af55-4350-990a-6a68a56384d8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"badbe5d4-7ab5-425e-9873-63296dbdc8e7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2af0cd97-f569-450c-a76b-6c8d1b91d569"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/69d61257011a"]}} {"level":"debug","ts":"2026-07-24T17:54:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"95bc09c2-af55-4350-990a-6a68a56384d8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/69d61257011a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2af0cd97-f569-450c-a76b-6c8d1b91d569"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"badbe5d4-7ab5-425e-9873-63296dbdc8e7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f3b9b9d1fe514ee98475d28c6dc78ebaf5e9456a9d22de3344d47e2334ec0b02"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bb94b3.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:54:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95bc09c2-af55-4350-990a-6a68a56384d8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:54:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95bc09c2-af55-4350-990a-6a68a56384d8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:54:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95bc09c2-af55-4350-990a-6a68a56384d8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bb94b3/sub-test-model-bb94b3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bb94b3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:54:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"95bc09c2-af55-4350-990a-6a68a56384d8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T17:54:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"95bc09c2-af55-4350-990a-6a68a56384d8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:54:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"95bc09c2-af55-4350-990a-6a68a56384d8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T17:54:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"95bc09c2-af55-4350-990a-6a68a56384d8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:54:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"95bc09c2-af55-4350-990a-6a68a56384d8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:54:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bc0fa0ea-b591-4488-9f80-4c6cce105159","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44056","PortSpecifier":{"PortValue":44056}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bc0fa0ea-b591-4488-9f80-4c6cce105159","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-5c7cfc.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:54:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bc0fa0ea-b591-4488-9f80-4c6cce105159","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44056","PortSpecifier":{"PortValue":44056}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915643,"nanos":646157660},"http":{"id":"bc0fa0ea-b591-4488-9f80-4c6cce105159","method":"POST","headers":{":authority":"e2e-shared-b-5c7cfc.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:54:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bc0fa0ea-b591-4488-9f80-4c6cce105159","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T17:54:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bc0fa0ea-b591-4488-9f80-4c6cce105159","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"badbe5d4-7ab5-425e-9873-63296dbdc8e7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2af0cd97-f569-450c-a76b-6c8d1b91d569"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/69d61257011a"]}} {"level":"debug","ts":"2026-07-24T17:54:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bc0fa0ea-b591-4488-9f80-4c6cce105159","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/69d61257011a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2af0cd97-f569-450c-a76b-6c8d1b91d569"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"badbe5d4-7ab5-425e-9873-63296dbdc8e7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-5c7cfc.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:54:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc0fa0ea-b591-4488-9f80-4c6cce105159","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:54:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc0fa0ea-b591-4488-9f80-4c6cce105159","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:54:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc0fa0ea-b591-4488-9f80-4c6cce105159","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5c7cfc/sub-test-model-5c7cfc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-5c7cfc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:54:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bc0fa0ea-b591-4488-9f80-4c6cce105159","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T17:54:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bc0fa0ea-b591-4488-9f80-4c6cce105159","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:54:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bc0fa0ea-b591-4488-9f80-4c6cce105159","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T17:54:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bc0fa0ea-b591-4488-9f80-4c6cce105159","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:54:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bc0fa0ea-b591-4488-9f80-4c6cce105159","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:54:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5321d94e-0221-47f7-9098-d1f33300b82e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:57568","PortSpecifier":{"PortValue":57568}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5321d94e-0221-47f7-9098-d1f33300b82e","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-bb94b3.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:54:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5321d94e-0221-47f7-9098-d1f33300b82e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:57568","PortSpecifier":{"PortValue":57568}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915643,"nanos":682245985},"http":{"id":"5321d94e-0221-47f7-9098-d1f33300b82e","method":"GET","headers":{":authority":"e2e-shared-a-bb94b3.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:54:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5321d94e-0221-47f7-9098-d1f33300b82e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Eg8oigZNfpEq2Yq2_UERC50qBMUtPkePQnRKZSExHxLPrPglLXHwIguq71o3"} {"level":"debug","ts":"2026-07-24T17:54:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5321d94e-0221-47f7-9098-d1f33300b82e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bb94b3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Eg8oigZNfpEq2Yq2_UERC50qBMUtPkePQnRKZSExHxLPrPglLXHwIguq71o3\"}"} {"level":"debug","ts":"2026-07-24T17:54:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5321d94e-0221-47f7-9098-d1f33300b82e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bb94b3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"caf3f933-4778-4536-a151-b5b7708c6242","keyName":"e2e-sub-iso-6310f5","subscription":"e2e-a-only-b0e386","tenant":"e2e-shared-a-bb94b3","userId":"caf3f933-4778-4536-a151-b5b7708c6242","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T17:54:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5321d94e-0221-47f7-9098-d1f33300b82e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:54:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5321d94e-0221-47f7-9098-d1f33300b82e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:54:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5321d94e-0221-47f7-9098-d1f33300b82e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:54:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5321d94e-0221-47f7-9098-d1f33300b82e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bb94b3/sub-test-model-bb94b3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bb94b3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:54:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5321d94e-0221-47f7-9098-d1f33300b82e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-b0e386"} {"level":"debug","ts":"2026-07-24T17:54:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5321d94e-0221-47f7-9098-d1f33300b82e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:54:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5321d94e-0221-47f7-9098-d1f33300b82e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T17:54:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5321d94e-0221-47f7-9098-d1f33300b82e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-24T17:54:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5321d94e-0221-47f7-9098-d1f33300b82e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:54:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5321d94e-0221-47f7-9098-d1f33300b82e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:54:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0e8f97f3-bdda-4b12-9771-62ea76edbbf5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44064","PortSpecifier":{"PortValue":44064}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0e8f97f3-bdda-4b12-9771-62ea76edbbf5","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-5c7cfc.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:54:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0e8f97f3-bdda-4b12-9771-62ea76edbbf5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44064","PortSpecifier":{"PortValue":44064}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915643,"nanos":722999079},"http":{"id":"0e8f97f3-bdda-4b12-9771-62ea76edbbf5","method":"GET","headers":{":authority":"e2e-shared-b-5c7cfc.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:54:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0e8f97f3-bdda-4b12-9771-62ea76edbbf5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-VqVK74QF6hWnAGfc_MXDIrIPxREfMt2RiAovgINk4JULisXKmNH3NCR92gnA"} {"level":"debug","ts":"2026-07-24T17:54:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0e8f97f3-bdda-4b12-9771-62ea76edbbf5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-5c7cfc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-VqVK74QF6hWnAGfc_MXDIrIPxREfMt2RiAovgINk4JULisXKmNH3NCR92gnA\"}"} {"level":"debug","ts":"2026-07-24T17:54:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0e8f97f3-bdda-4b12-9771-62ea76edbbf5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-5c7cfc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ea96e6bb-a50d-49ac-82e4-c1ef839a2d3e","keyName":"e2e-sub-iso-d55142","subscription":"e2e-b-only-b0e386","tenant":"e2e-shared-b-5c7cfc","userId":"ea96e6bb-a50d-49ac-82e4-c1ef839a2d3e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T17:54:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0e8f97f3-bdda-4b12-9771-62ea76edbbf5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:54:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e8f97f3-bdda-4b12-9771-62ea76edbbf5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:54:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e8f97f3-bdda-4b12-9771-62ea76edbbf5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:54:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e8f97f3-bdda-4b12-9771-62ea76edbbf5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5c7cfc/sub-test-model-5c7cfc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-5c7cfc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:54:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e8f97f3-bdda-4b12-9771-62ea76edbbf5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:54:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e8f97f3-bdda-4b12-9771-62ea76edbbf5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T17:54:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e8f97f3-bdda-4b12-9771-62ea76edbbf5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-b0e386"} {"level":"debug","ts":"2026-07-24T17:54:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0e8f97f3-bdda-4b12-9771-62ea76edbbf5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-24T17:54:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0e8f97f3-bdda-4b12-9771-62ea76edbbf5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:54:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0e8f97f3-bdda-4b12-9771-62ea76edbbf5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:54:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3694b42d-d6d8-4289-aac8-44d88cdf834f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44814","PortSpecifier":{"PortValue":44814}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3694b42d-d6d8-4289-aac8-44d88cdf834f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-bb94b3.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:54:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3694b42d-d6d8-4289-aac8-44d88cdf834f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44814","PortSpecifier":{"PortValue":44814}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915655,"nanos":854477121},"http":{"id":"3694b42d-d6d8-4289-aac8-44d88cdf834f","method":"POST","headers":{":authority":"e2e-shared-a-bb94b3.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:54:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3694b42d-d6d8-4289-aac8-44d88cdf834f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T17:54:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3694b42d-d6d8-4289-aac8-44d88cdf834f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"badbe5d4-7ab5-425e-9873-63296dbdc8e7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2af0cd97-f569-450c-a76b-6c8d1b91d569"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/69d61257011a"]}} {"level":"debug","ts":"2026-07-24T17:54:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3694b42d-d6d8-4289-aac8-44d88cdf834f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/69d61257011a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2af0cd97-f569-450c-a76b-6c8d1b91d569"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"badbe5d4-7ab5-425e-9873-63296dbdc8e7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f3b9b9d1fe514ee98475d28c6dc78ebaf5e9456a9d22de3344d47e2334ec0b02"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bb94b3.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:54:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3694b42d-d6d8-4289-aac8-44d88cdf834f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:54:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3694b42d-d6d8-4289-aac8-44d88cdf834f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:54:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3694b42d-d6d8-4289-aac8-44d88cdf834f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bb94b3/sub-test-model-bb94b3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bb94b3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:54:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3694b42d-d6d8-4289-aac8-44d88cdf834f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T17:54:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3694b42d-d6d8-4289-aac8-44d88cdf834f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:54:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3694b42d-d6d8-4289-aac8-44d88cdf834f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T17:54:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3694b42d-d6d8-4289-aac8-44d88cdf834f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:54:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3694b42d-d6d8-4289-aac8-44d88cdf834f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:54:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dc201612-18bf-487d-94c5-0dce4994706b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40508","PortSpecifier":{"PortValue":40508}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dc201612-18bf-487d-94c5-0dce4994706b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-5c7cfc.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:54:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dc201612-18bf-487d-94c5-0dce4994706b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40508","PortSpecifier":{"PortValue":40508}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915655,"nanos":891542252},"http":{"id":"dc201612-18bf-487d-94c5-0dce4994706b","method":"POST","headers":{":authority":"e2e-shared-b-5c7cfc.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:54:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"dc201612-18bf-487d-94c5-0dce4994706b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T17:54:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dc201612-18bf-487d-94c5-0dce4994706b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"badbe5d4-7ab5-425e-9873-63296dbdc8e7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2af0cd97-f569-450c-a76b-6c8d1b91d569"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/69d61257011a"]}} {"level":"debug","ts":"2026-07-24T17:54:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dc201612-18bf-487d-94c5-0dce4994706b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/69d61257011a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2af0cd97-f569-450c-a76b-6c8d1b91d569"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"badbe5d4-7ab5-425e-9873-63296dbdc8e7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-5c7cfc.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:54:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc201612-18bf-487d-94c5-0dce4994706b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:54:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc201612-18bf-487d-94c5-0dce4994706b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:54:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc201612-18bf-487d-94c5-0dce4994706b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5c7cfc/sub-test-model-5c7cfc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-5c7cfc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:54:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dc201612-18bf-487d-94c5-0dce4994706b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T17:54:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc201612-18bf-487d-94c5-0dce4994706b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:54:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc201612-18bf-487d-94c5-0dce4994706b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T17:54:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dc201612-18bf-487d-94c5-0dce4994706b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:54:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dc201612-18bf-487d-94c5-0dce4994706b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:54:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c294f4b-6698-486a-8113-b151bff68a40","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44820","PortSpecifier":{"PortValue":44820}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0c294f4b-6698-486a-8113-b151bff68a40","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-bb94b3.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:54:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c294f4b-6698-486a-8113-b151bff68a40","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44820","PortSpecifier":{"PortValue":44820}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915655,"nanos":925281535},"http":{"id":"0c294f4b-6698-486a-8113-b151bff68a40","method":"POST","headers":{":authority":"e2e-shared-a-bb94b3.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:54:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0c294f4b-6698-486a-8113-b151bff68a40","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1P2zKbfsLrNcJ9zeT_p8r7zjRfwZ6EUV5T3AH6mdeyoMpm0jtSRKo8gGj7SYI"} {"level":"debug","ts":"2026-07-24T17:54:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0c294f4b-6698-486a-8113-b151bff68a40","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bb94b3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1P2zKbfsLrNcJ9zeT_p8r7zjRfwZ6EUV5T3AH6mdeyoMpm0jtSRKo8gGj7SYI\"}"} {"level":"debug","ts":"2026-07-24T17:54:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0c294f4b-6698-486a-8113-b151bff68a40","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bb94b3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7d2769ef-cd03-46f1-be89-c4c853dcf4f0","keyName":"e2e-sub-iso-07b944","subscription":"e2e-shared-sub-08beb9","tenant":"e2e-shared-a-bb94b3","userId":"7d2769ef-cd03-46f1-be89-c4c853dcf4f0","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T17:54:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0c294f4b-6698-486a-8113-b151bff68a40","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:54:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c294f4b-6698-486a-8113-b151bff68a40","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:54:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c294f4b-6698-486a-8113-b151bff68a40","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:54:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c294f4b-6698-486a-8113-b151bff68a40","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bb94b3/sub-test-model-bb94b3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bb94b3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:54:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c294f4b-6698-486a-8113-b151bff68a40","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:54:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c294f4b-6698-486a-8113-b151bff68a40","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-08beb9"} {"level":"debug","ts":"2026-07-24T17:54:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c294f4b-6698-486a-8113-b151bff68a40","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T17:54:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0c294f4b-6698-486a-8113-b151bff68a40","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-24T17:54:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c294f4b-6698-486a-8113-b151bff68a40","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:54:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c294f4b-6698-486a-8113-b151bff68a40","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:54:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dfd8cb53-f8c7-4997-8456-6dc125a5cf30","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40524","PortSpecifier":{"PortValue":40524}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dfd8cb53-f8c7-4997-8456-6dc125a5cf30","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-5c7cfc.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:54:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dfd8cb53-f8c7-4997-8456-6dc125a5cf30","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40524","PortSpecifier":{"PortValue":40524}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915655,"nanos":958417373},"http":{"id":"dfd8cb53-f8c7-4997-8456-6dc125a5cf30","method":"POST","headers":{":authority":"e2e-shared-b-5c7cfc.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:54:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dfd8cb53-f8c7-4997-8456-6dc125a5cf30","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Dog9FEj9Pq0NykLW_5e2Jx6m1W5LPOSg2RCNKQ2qIJtU2rxSxl12ykeRZlRk"} {"level":"debug","ts":"2026-07-24T17:54:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dfd8cb53-f8c7-4997-8456-6dc125a5cf30","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-5c7cfc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Dog9FEj9Pq0NykLW_5e2Jx6m1W5LPOSg2RCNKQ2qIJtU2rxSxl12ykeRZlRk\"}"} {"level":"debug","ts":"2026-07-24T17:54:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dfd8cb53-f8c7-4997-8456-6dc125a5cf30","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-5c7cfc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a9e9f68e-5cf4-4dc5-806e-4b43e88eeb70","keyName":"e2e-sub-iso-7be52d","subscription":"e2e-shared-sub-08beb9","tenant":"e2e-shared-b-5c7cfc","userId":"a9e9f68e-5cf4-4dc5-806e-4b43e88eeb70","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T17:54:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dfd8cb53-f8c7-4997-8456-6dc125a5cf30","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:54:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dfd8cb53-f8c7-4997-8456-6dc125a5cf30","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:54:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dfd8cb53-f8c7-4997-8456-6dc125a5cf30","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:54:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dfd8cb53-f8c7-4997-8456-6dc125a5cf30","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5c7cfc/sub-test-model-5c7cfc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-5c7cfc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:54:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dfd8cb53-f8c7-4997-8456-6dc125a5cf30","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:54:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dfd8cb53-f8c7-4997-8456-6dc125a5cf30","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T17:54:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dfd8cb53-f8c7-4997-8456-6dc125a5cf30","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-08beb9"} {"level":"debug","ts":"2026-07-24T17:54:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dfd8cb53-f8c7-4997-8456-6dc125a5cf30","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-24T17:54:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dfd8cb53-f8c7-4997-8456-6dc125a5cf30","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:54:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dfd8cb53-f8c7-4997-8456-6dc125a5cf30","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0103497cda12451b843593328938d6e43592ca47033c704930deda4026a41a8f"} {"level":"info","ts":"2026-07-24T17:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8979b2eaf8a85fdc5306c16754f914c5c42988c910974ddd1e978b2fb33b0e53"} {"level":"info","ts":"2026-07-24T17:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ae4c7b1e199b773fa68992189948b0d9f8c87d8c7c82107e275d5bbf345c7117"} {"level":"info","ts":"2026-07-24T17:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ff5b385ee16d96deff3882d13bc4001b6a95cfd00c8ae1ae2a5dbc334c7d8ed5"} {"level":"info","ts":"2026-07-24T17:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/974b885f881b0089fb6d83bd185e454f13b8d2cbda9ccbce0dfc1cf2598b8c96"} {"level":"info","ts":"2026-07-24T17:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f3b9b9d1fe514ee98475d28c6dc78ebaf5e9456a9d22de3344d47e2334ec0b02"} {"level":"info","ts":"2026-07-24T17:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9df57bab60148e217eee288eb72349758654a9fd91d79d23d2e37da739d8430b"} {"level":"info","ts":"2026-07-24T17:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2290b90e714b5c332f37d6a6ad89c6da190c342a9aed2e11a1316f23531e7a07"} {"level":"info","ts":"2026-07-24T17:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5d92ce6aa334d6bab9a6bfc4040d8040b826942d90a99107b17434db601c250c"} {"level":"info","ts":"2026-07-24T17:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9b708d3409dedceffe5e0cf61c5a874790de9c6f2af3f955df12fda622341b5c"} {"level":"info","ts":"2026-07-24T17:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3bd7e463a0b77331e3ab9c7f0e1093aca8339f64d6b0e9e95a011613e9e80e0c"} {"level":"info","ts":"2026-07-24T17:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/89ab29e3bd710b6d77daa98257dfa2a5e1d014d5a3cae336ad2573b205f57af6"} {"level":"info","ts":"2026-07-24T17:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e866c8c8890d221103b0441807a4965dfa5f63a3cc13530db9992edd8192c7ad"} {"level":"info","ts":"2026-07-24T17:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07"} {"level":"info","ts":"2026-07-24T17:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8c07aa2f96a768b17d101030f8ab37a3604a90ee077e0efb6cc0f965b06d6caa"} {"level":"info","ts":"2026-07-24T17:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f643d1ea356ef515bc3a6289a99807c70b9091153a3085e542bc1ae6e472ba6"} {"level":"info","ts":"2026-07-24T17:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1ffd1bf5fdd4ffd4014c0bf80b28e0e2ea1dd7e040f9e913eaca9e3085ec3637"} {"level":"info","ts":"2026-07-24T17:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8490bb679a55d5eb6085ed4f469e803828346fd2b30de2dc9d55b9a0e36de181"} {"level":"info","ts":"2026-07-24T17:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/73653ac8666fcd79b5d78d07300f1788de2c35ef7168a1a4bda9693c80a0cc77"} {"level":"info","ts":"2026-07-24T17:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9fade40f880a8a912d9e2f36b4607929fa5e9b1b89a6b56757f53114fc8d6e46"} {"level":"info","ts":"2026-07-24T17:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/279584dfbe9fcf1f993847be29e04ee83ec5f34df82e459ec0cdaf8a76b63ede"} {"level":"info","ts":"2026-07-24T17:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c"} {"level":"info","ts":"2026-07-24T17:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/04176745144905286bb2c89691cf726f1d7803852fc3298c3278b27915659d15"} {"level":"info","ts":"2026-07-24T17:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d42231d5203b12bdb65cbd61a5ac78fd8bd423806a90ffeb2f8dde650da42536"} {"level":"debug","ts":"2026-07-24T17:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f2eba0275d124f66d5d0ffd570f306409a3bdc5d78a8baac2134dd2d804ab4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:55:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:55:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f2eba0275d124f66d5d0ffd570f306409a3bdc5d78a8baac2134dd2d804ab4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f2eba0275d124f66d5d0ffd570f306409a3bdc5d78a8baac2134dd2d804ab4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f2eba0275d124f66d5d0ffd570f306409a3bdc5d78a8baac2134dd2d804ab4a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f2eba0275d124f66d5d0ffd570f306409a3bdc5d78a8baac2134dd2d804ab4a"} {"level":"debug","ts":"2026-07-24T17:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f2eba0275d124f66d5d0ffd570f306409a3bdc5d78a8baac2134dd2d804ab4a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f2eba0275d124f66d5d0ffd570f306409a3bdc5d78a8baac2134dd2d804ab4a"} {"level":"debug","ts":"2026-07-24T17:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f2eba0275d124f66d5d0ffd570f306409a3bdc5d78a8baac2134dd2d804ab4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:55:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:55:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f2eba0275d124f66d5d0ffd570f306409a3bdc5d78a8baac2134dd2d804ab4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f2eba0275d124f66d5d0ffd570f306409a3bdc5d78a8baac2134dd2d804ab4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f2eba0275d124f66d5d0ffd570f306409a3bdc5d78a8baac2134dd2d804ab4a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f2eba0275d124f66d5d0ffd570f306409a3bdc5d78a8baac2134dd2d804ab4a"} {"level":"debug","ts":"2026-07-24T17:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3629998d23eaf0f326de3c87752bca62139e970e003c01f8f4921b271293d623","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:55:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:55:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3629998d23eaf0f326de3c87752bca62139e970e003c01f8f4921b271293d623","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3629998d23eaf0f326de3c87752bca62139e970e003c01f8f4921b271293d623","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:55:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:55:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3629998d23eaf0f326de3c87752bca62139e970e003c01f8f4921b271293d623"} {"level":"info","ts":"2026-07-24T17:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3629998d23eaf0f326de3c87752bca62139e970e003c01f8f4921b271293d623","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3629998d23eaf0f326de3c87752bca62139e970e003c01f8f4921b271293d623","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:55:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:55:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T17:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3629998d23eaf0f326de3c87752bca62139e970e003c01f8f4921b271293d623","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3629998d23eaf0f326de3c87752bca62139e970e003c01f8f4921b271293d623\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T17:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3629998d23eaf0f326de3c87752bca62139e970e003c01f8f4921b271293d623","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3629998d23eaf0f326de3c87752bca62139e970e003c01f8f4921b271293d623","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3629998d23eaf0f326de3c87752bca62139e970e003c01f8f4921b271293d623"} {"level":"info","ts":"2026-07-24T17:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3629998d23eaf0f326de3c87752bca62139e970e003c01f8f4921b271293d623"} {"level":"debug","ts":"2026-07-24T17:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"897beee98b27704b535aece1f3ba8bb3fe8bbaad4612048f0b792e96dbcbf52d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:55:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:55:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"897beee98b27704b535aece1f3ba8bb3fe8bbaad4612048f0b792e96dbcbf52d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3629998d23eaf0f326de3c87752bca62139e970e003c01f8f4921b271293d623","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:55:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:55:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3629998d23eaf0f326de3c87752bca62139e970e003c01f8f4921b271293d623"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/897beee98b27704b535aece1f3ba8bb3fe8bbaad4612048f0b792e96dbcbf52d"} {"level":"info","ts":"2026-07-24T17:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3629998d23eaf0f326de3c87752bca62139e970e003c01f8f4921b271293d623","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"897beee98b27704b535aece1f3ba8bb3fe8bbaad4612048f0b792e96dbcbf52d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3629998d23eaf0f326de3c87752bca62139e970e003c01f8f4921b271293d623","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"897beee98b27704b535aece1f3ba8bb3fe8bbaad4612048f0b792e96dbcbf52d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/897beee98b27704b535aece1f3ba8bb3fe8bbaad4612048f0b792e96dbcbf52d"} {"level":"debug","ts":"2026-07-24T17:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"897beee98b27704b535aece1f3ba8bb3fe8bbaad4612048f0b792e96dbcbf52d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:55:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:55:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["897beee98b27704b535aece1f3ba8bb3fe8bbaad4612048f0b792e96dbcbf52d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3629998d23eaf0f326de3c87752bca62139e970e003c01f8f4921b271293d623"} {"level":"info","ts":"2026-07-24T17:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"897beee98b27704b535aece1f3ba8bb3fe8bbaad4612048f0b792e96dbcbf52d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"897beee98b27704b535aece1f3ba8bb3fe8bbaad4612048f0b792e96dbcbf52d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:55:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:55:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"897beee98b27704b535aece1f3ba8bb3fe8bbaad4612048f0b792e96dbcbf52d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"897beee98b27704b535aece1f3ba8bb3fe8bbaad4612048f0b792e96dbcbf52d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"897beee98b27704b535aece1f3ba8bb3fe8bbaad4612048f0b792e96dbcbf52d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/897beee98b27704b535aece1f3ba8bb3fe8bbaad4612048f0b792e96dbcbf52d"} {"level":"debug","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"897beee98b27704b535aece1f3ba8bb3fe8bbaad4612048f0b792e96dbcbf52d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/897beee98b27704b535aece1f3ba8bb3fe8bbaad4612048f0b792e96dbcbf52d"} {"level":"debug","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"897beee98b27704b535aece1f3ba8bb3fe8bbaad4612048f0b792e96dbcbf52d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["897beee98b27704b535aece1f3ba8bb3fe8bbaad4612048f0b792e96dbcbf52d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"897beee98b27704b535aece1f3ba8bb3fe8bbaad4612048f0b792e96dbcbf52d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"897beee98b27704b535aece1f3ba8bb3fe8bbaad4612048f0b792e96dbcbf52d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/897beee98b27704b535aece1f3ba8bb3fe8bbaad4612048f0b792e96dbcbf52d"} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07"} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07"} {"level":"error","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07"} {"level":"debug","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c"} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c"} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c"} {"level":"debug","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07"} {"level":"debug","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b72db40cd1e032966222499a7004adff64c3414babf828cad082ed091e34e8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c"} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b72db40cd1e032966222499a7004adff64c3414babf828cad082ed091e34e8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b72db40cd1e032966222499a7004adff64c3414babf828cad082ed091e34e8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b72db40cd1e032966222499a7004adff64c3414babf828cad082ed091e34e8f"} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b72db40cd1e032966222499a7004adff64c3414babf828cad082ed091e34e8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b72db40cd1e032966222499a7004adff64c3414babf828cad082ed091e34e8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0b72db40cd1e032966222499a7004adff64c3414babf828cad082ed091e34e8f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0b72db40cd1e032966222499a7004adff64c3414babf828cad082ed091e34e8f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b72db40cd1e032966222499a7004adff64c3414babf828cad082ed091e34e8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b72db40cd1e032966222499a7004adff64c3414babf828cad082ed091e34e8f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b72db40cd1e032966222499a7004adff64c3414babf828cad082ed091e34e8f"} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b72db40cd1e032966222499a7004adff64c3414babf828cad082ed091e34e8f"} {"level":"debug","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2146a5b217bf8cf6f53afb7dc295c3b725320eb14769160833ebb96f86fddd1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2146a5b217bf8cf6f53afb7dc295c3b725320eb14769160833ebb96f86fddd1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2146a5b217bf8cf6f53afb7dc295c3b725320eb14769160833ebb96f86fddd1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2146a5b217bf8cf6f53afb7dc295c3b725320eb14769160833ebb96f86fddd1c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2146a5b217bf8cf6f53afb7dc295c3b725320eb14769160833ebb96f86fddd1c"} {"level":"debug","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b72db40cd1e032966222499a7004adff64c3414babf828cad082ed091e34e8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b72db40cd1e032966222499a7004adff64c3414babf828cad082ed091e34e8f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b72db40cd1e032966222499a7004adff64c3414babf828cad082ed091e34e8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b72db40cd1e032966222499a7004adff64c3414babf828cad082ed091e34e8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2146a5b217bf8cf6f53afb7dc295c3b725320eb14769160833ebb96f86fddd1c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2146a5b217bf8cf6f53afb7dc295c3b725320eb14769160833ebb96f86fddd1c"} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b72db40cd1e032966222499a7004adff64c3414babf828cad082ed091e34e8f"} {"level":"debug","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2146a5b217bf8cf6f53afb7dc295c3b725320eb14769160833ebb96f86fddd1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2146a5b217bf8cf6f53afb7dc295c3b725320eb14769160833ebb96f86fddd1c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2146a5b217bf8cf6f53afb7dc295c3b725320eb14769160833ebb96f86fddd1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2146a5b217bf8cf6f53afb7dc295c3b725320eb14769160833ebb96f86fddd1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2146a5b217bf8cf6f53afb7dc295c3b725320eb14769160833ebb96f86fddd1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bc0e3ac59839925bd9744e9cac0d39210805459bb8574d731d9f49421b8e2c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2146a5b217bf8cf6f53afb7dc295c3b725320eb14769160833ebb96f86fddd1c"} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bc0e3ac59839925bd9744e9cac0d39210805459bb8574d731d9f49421b8e2c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2146a5b217bf8cf6f53afb7dc295c3b725320eb14769160833ebb96f86fddd1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2146a5b217bf8cf6f53afb7dc295c3b725320eb14769160833ebb96f86fddd1c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2146a5b217bf8cf6f53afb7dc295c3b725320eb14769160833ebb96f86fddd1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bc0e3ac59839925bd9744e9cac0d39210805459bb8574d731d9f49421b8e2c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bc0e3ac59839925bd9744e9cac0d39210805459bb8574d731d9f49421b8e2c9"} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bc0e3ac59839925bd9744e9cac0d39210805459bb8574d731d9f49421b8e2c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2146a5b217bf8cf6f53afb7dc295c3b725320eb14769160833ebb96f86fddd1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2146a5b217bf8cf6f53afb7dc295c3b725320eb14769160833ebb96f86fddd1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bc0e3ac59839925bd9744e9cac0d39210805459bb8574d731d9f49421b8e2c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5bc0e3ac59839925bd9744e9cac0d39210805459bb8574d731d9f49421b8e2c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2146a5b217bf8cf6f53afb7dc295c3b725320eb14769160833ebb96f86fddd1c"} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bc0e3ac59839925bd9744e9cac0d39210805459bb8574d731d9f49421b8e2c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2146a5b217bf8cf6f53afb7dc295c3b725320eb14769160833ebb96f86fddd1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2146a5b217bf8cf6f53afb7dc295c3b725320eb14769160833ebb96f86fddd1c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2146a5b217bf8cf6f53afb7dc295c3b725320eb14769160833ebb96f86fddd1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bc0e3ac59839925bd9744e9cac0d39210805459bb8574d731d9f49421b8e2c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bc0e3ac59839925bd9744e9cac0d39210805459bb8574d731d9f49421b8e2c9"} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bc0e3ac59839925bd9744e9cac0d39210805459bb8574d731d9f49421b8e2c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2146a5b217bf8cf6f53afb7dc295c3b725320eb14769160833ebb96f86fddd1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2146a5b217bf8cf6f53afb7dc295c3b725320eb14769160833ebb96f86fddd1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b708d3409dedceffe5e0cf61c5a874790de9c6f2af3f955df12fda622341b5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2146a5b217bf8cf6f53afb7dc295c3b725320eb14769160833ebb96f86fddd1c"} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b708d3409dedceffe5e0cf61c5a874790de9c6f2af3f955df12fda622341b5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bc0e3ac59839925bd9744e9cac0d39210805459bb8574d731d9f49421b8e2c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2146a5b217bf8cf6f53afb7dc295c3b725320eb14769160833ebb96f86fddd1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2146a5b217bf8cf6f53afb7dc295c3b725320eb14769160833ebb96f86fddd1c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2146a5b217bf8cf6f53afb7dc295c3b725320eb14769160833ebb96f86fddd1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b708d3409dedceffe5e0cf61c5a874790de9c6f2af3f955df12fda622341b5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bc0e3ac59839925bd9744e9cac0d39210805459bb8574d731d9f49421b8e2c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2146a5b217bf8cf6f53afb7dc295c3b725320eb14769160833ebb96f86fddd1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b708d3409dedceffe5e0cf61c5a874790de9c6f2af3f955df12fda622341b5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bc0e3ac59839925bd9744e9cac0d39210805459bb8574d731d9f49421b8e2c9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bc0e3ac59839925bd9744e9cac0d39210805459bb8574d731d9f49421b8e2c9"} {"level":"debug","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b708d3409dedceffe5e0cf61c5a874790de9c6f2af3f955df12fda622341b5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b708d3409dedceffe5e0cf61c5a874790de9c6f2af3f955df12fda622341b5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17afb5d342d975cd8b53a095d10cc6269ed416025acd91a242073a52fc5bd88d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17afb5d342d975cd8b53a095d10cc6269ed416025acd91a242073a52fc5bd88d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b708d3409dedceffe5e0cf61c5a874790de9c6f2af3f955df12fda622341b5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bc0e3ac59839925bd9744e9cac0d39210805459bb8574d731d9f49421b8e2c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5bc0e3ac59839925bd9744e9cac0d39210805459bb8574d731d9f49421b8e2c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b708d3409dedceffe5e0cf61c5a874790de9c6f2af3f955df12fda622341b5c"} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bc0e3ac59839925bd9744e9cac0d39210805459bb8574d731d9f49421b8e2c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17afb5d342d975cd8b53a095d10cc6269ed416025acd91a242073a52fc5bd88d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bc0e3ac59839925bd9744e9cac0d39210805459bb8574d731d9f49421b8e2c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17afb5d342d975cd8b53a095d10cc6269ed416025acd91a242073a52fc5bd88d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2146a5b217bf8cf6f53afb7dc295c3b725320eb14769160833ebb96f86fddd1c"} {"level":"debug","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b708d3409dedceffe5e0cf61c5a874790de9c6f2af3f955df12fda622341b5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b708d3409dedceffe5e0cf61c5a874790de9c6f2af3f955df12fda622341b5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b708d3409dedceffe5e0cf61c5a874790de9c6f2af3f955df12fda622341b5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b708d3409dedceffe5e0cf61c5a874790de9c6f2af3f955df12fda622341b5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17afb5d342d975cd8b53a095d10cc6269ed416025acd91a242073a52fc5bd88d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17afb5d342d975cd8b53a095d10cc6269ed416025acd91a242073a52fc5bd88d"} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17afb5d342d975cd8b53a095d10cc6269ed416025acd91a242073a52fc5bd88d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17afb5d342d975cd8b53a095d10cc6269ed416025acd91a242073a52fc5bd88d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17afb5d342d975cd8b53a095d10cc6269ed416025acd91a242073a52fc5bd88d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17afb5d342d975cd8b53a095d10cc6269ed416025acd91a242073a52fc5bd88d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b708d3409dedceffe5e0cf61c5a874790de9c6f2af3f955df12fda622341b5c"} {"level":"debug","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17afb5d342d975cd8b53a095d10cc6269ed416025acd91a242073a52fc5bd88d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff5b385ee16d96deff3882d13bc4001b6a95cfd00c8ae1ae2a5dbc334c7d8ed5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bc0e3ac59839925bd9744e9cac0d39210805459bb8574d731d9f49421b8e2c9"} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff5b385ee16d96deff3882d13bc4001b6a95cfd00c8ae1ae2a5dbc334c7d8ed5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cacb13841af7c7658dd9c492acd53907b3a7b84847b24b36b41672e6f7db86ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cacb13841af7c7658dd9c492acd53907b3a7b84847b24b36b41672e6f7db86ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17afb5d342d975cd8b53a095d10cc6269ed416025acd91a242073a52fc5bd88d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17afb5d342d975cd8b53a095d10cc6269ed416025acd91a242073a52fc5bd88d"} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17afb5d342d975cd8b53a095d10cc6269ed416025acd91a242073a52fc5bd88d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff5b385ee16d96deff3882d13bc4001b6a95cfd00c8ae1ae2a5dbc334c7d8ed5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff5b385ee16d96deff3882d13bc4001b6a95cfd00c8ae1ae2a5dbc334c7d8ed5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cacb13841af7c7658dd9c492acd53907b3a7b84847b24b36b41672e6f7db86ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17afb5d342d975cd8b53a095d10cc6269ed416025acd91a242073a52fc5bd88d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17afb5d342d975cd8b53a095d10cc6269ed416025acd91a242073a52fc5bd88d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff5b385ee16d96deff3882d13bc4001b6a95cfd00c8ae1ae2a5dbc334c7d8ed5"} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17afb5d342d975cd8b53a095d10cc6269ed416025acd91a242073a52fc5bd88d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff5b385ee16d96deff3882d13bc4001b6a95cfd00c8ae1ae2a5dbc334c7d8ed5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff5b385ee16d96deff3882d13bc4001b6a95cfd00c8ae1ae2a5dbc334c7d8ed5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cacb13841af7c7658dd9c492acd53907b3a7b84847b24b36b41672e6f7db86ce"} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff5b385ee16d96deff3882d13bc4001b6a95cfd00c8ae1ae2a5dbc334c7d8ed5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cacb13841af7c7658dd9c492acd53907b3a7b84847b24b36b41672e6f7db86ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cacb13841af7c7658dd9c492acd53907b3a7b84847b24b36b41672e6f7db86ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cacb13841af7c7658dd9c492acd53907b3a7b84847b24b36b41672e6f7db86ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17afb5d342d975cd8b53a095d10cc6269ed416025acd91a242073a52fc5bd88d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17afb5d342d975cd8b53a095d10cc6269ed416025acd91a242073a52fc5bd88d"} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17afb5d342d975cd8b53a095d10cc6269ed416025acd91a242073a52fc5bd88d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff5b385ee16d96deff3882d13bc4001b6a95cfd00c8ae1ae2a5dbc334c7d8ed5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff5b385ee16d96deff3882d13bc4001b6a95cfd00c8ae1ae2a5dbc334c7d8ed5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cacb13841af7c7658dd9c492acd53907b3a7b84847b24b36b41672e6f7db86ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbbb95ce20c889753d34f8a96c3901ae48a4448ba156b458c22c30d12780a5e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff5b385ee16d96deff3882d13bc4001b6a95cfd00c8ae1ae2a5dbc334c7d8ed5"} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbbb95ce20c889753d34f8a96c3901ae48a4448ba156b458c22c30d12780a5e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17afb5d342d975cd8b53a095d10cc6269ed416025acd91a242073a52fc5bd88d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17afb5d342d975cd8b53a095d10cc6269ed416025acd91a242073a52fc5bd88d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cacb13841af7c7658dd9c492acd53907b3a7b84847b24b36b41672e6f7db86ce"} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17afb5d342d975cd8b53a095d10cc6269ed416025acd91a242073a52fc5bd88d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff5b385ee16d96deff3882d13bc4001b6a95cfd00c8ae1ae2a5dbc334c7d8ed5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff5b385ee16d96deff3882d13bc4001b6a95cfd00c8ae1ae2a5dbc334c7d8ed5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff5b385ee16d96deff3882d13bc4001b6a95cfd00c8ae1ae2a5dbc334c7d8ed5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbbb95ce20c889753d34f8a96c3901ae48a4448ba156b458c22c30d12780a5e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbbb95ce20c889753d34f8a96c3901ae48a4448ba156b458c22c30d12780a5e8"} {"level":"info","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbbb95ce20c889753d34f8a96c3901ae48a4448ba156b458c22c30d12780a5e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17afb5d342d975cd8b53a095d10cc6269ed416025acd91a242073a52fc5bd88d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:55:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17afb5d342d975cd8b53a095d10cc6269ed416025acd91a242073a52fc5bd88d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff5b385ee16d96deff3882d13bc4001b6a95cfd00c8ae1ae2a5dbc334c7d8ed5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbbb95ce20c889753d34f8a96c3901ae48a4448ba156b458c22c30d12780a5e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:55:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:55:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dbbb95ce20c889753d34f8a96c3901ae48a4448ba156b458c22c30d12780a5e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17afb5d342d975cd8b53a095d10cc6269ed416025acd91a242073a52fc5bd88d"} {"level":"info","ts":"2026-07-24T17:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbbb95ce20c889753d34f8a96c3901ae48a4448ba156b458c22c30d12780a5e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17afb5d342d975cd8b53a095d10cc6269ed416025acd91a242073a52fc5bd88d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:55:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:55:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17afb5d342d975cd8b53a095d10cc6269ed416025acd91a242073a52fc5bd88d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff5b385ee16d96deff3882d13bc4001b6a95cfd00c8ae1ae2a5dbc334c7d8ed5"} {"level":"info","ts":"2026-07-24T17:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17afb5d342d975cd8b53a095d10cc6269ed416025acd91a242073a52fc5bd88d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbbb95ce20c889753d34f8a96c3901ae48a4448ba156b458c22c30d12780a5e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:55:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:55:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbbb95ce20c889753d34f8a96c3901ae48a4448ba156b458c22c30d12780a5e8"} {"level":"info","ts":"2026-07-24T17:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17afb5d342d975cd8b53a095d10cc6269ed416025acd91a242073a52fc5bd88d"} {"level":"info","ts":"2026-07-24T17:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbbb95ce20c889753d34f8a96c3901ae48a4448ba156b458c22c30d12780a5e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9df57bab60148e217eee288eb72349758654a9fd91d79d23d2e37da739d8430b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:55:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:55:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9df57bab60148e217eee288eb72349758654a9fd91d79d23d2e37da739d8430b"} {"level":"info","ts":"2026-07-24T17:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbbb95ce20c889753d34f8a96c3901ae48a4448ba156b458c22c30d12780a5e8"} {"level":"info","ts":"2026-07-24T17:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9df57bab60148e217eee288eb72349758654a9fd91d79d23d2e37da739d8430b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17afb5d342d975cd8b53a095d10cc6269ed416025acd91a242073a52fc5bd88d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbbb95ce20c889753d34f8a96c3901ae48a4448ba156b458c22c30d12780a5e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:55:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:55:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dbbb95ce20c889753d34f8a96c3901ae48a4448ba156b458c22c30d12780a5e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f48736e851e02fb1528c9e951f2005d2d47bde0704b235ef389b67624b5f7f5e"} {"level":"info","ts":"2026-07-24T17:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6965623185e1285c7bc9c940c0900a2a9b3ad6aeebde61f8cad529fb66387d48"} {"level":"info","ts":"2026-07-24T17:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9df57bab60148e217eee288eb72349758654a9fd91d79d23d2e37da739d8430b"} {"level":"info","ts":"2026-07-24T17:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbbb95ce20c889753d34f8a96c3901ae48a4448ba156b458c22c30d12780a5e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f48736e851e02fb1528c9e951f2005d2d47bde0704b235ef389b67624b5f7f5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:55:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:55:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f48736e851e02fb1528c9e951f2005d2d47bde0704b235ef389b67624b5f7f5e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89ab29e3bd710b6d77daa98257dfa2a5e1d014d5a3cae336ad2573b205f57af6"} {"level":"info","ts":"2026-07-24T17:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbbb95ce20c889753d34f8a96c3901ae48a4448ba156b458c22c30d12780a5e8"} {"level":"info","ts":"2026-07-24T17:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f48736e851e02fb1528c9e951f2005d2d47bde0704b235ef389b67624b5f7f5e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6965623185e1285c7bc9c940c0900a2a9b3ad6aeebde61f8cad529fb66387d48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:55:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:55:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6965623185e1285c7bc9c940c0900a2a9b3ad6aeebde61f8cad529fb66387d48"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3b9b9d1fe514ee98475d28c6dc78ebaf5e9456a9d22de3344d47e2334ec0b02"} {"level":"info","ts":"2026-07-24T17:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f48736e851e02fb1528c9e951f2005d2d47bde0704b235ef389b67624b5f7f5e"} {"level":"info","ts":"2026-07-24T17:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26aa499fa2f7c92395163994f64b6b90204ee144f82302be6677ce717386069d"} {"level":"info","ts":"2026-07-24T17:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6965623185e1285c7bc9c940c0900a2a9b3ad6aeebde61f8cad529fb66387d48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9df57bab60148e217eee288eb72349758654a9fd91d79d23d2e37da739d8430b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:55:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:55:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9df57bab60148e217eee288eb72349758654a9fd91d79d23d2e37da739d8430b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73653ac8666fcd79b5d78d07300f1788de2c35ef7168a1a4bda9693c80a0cc77"} {"level":"info","ts":"2026-07-24T17:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ecd9d402164f27bff83003ae6a2f16b4cc44d47181c160a1eb20d37ff16990b"} {"level":"info","ts":"2026-07-24T17:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9df57bab60148e217eee288eb72349758654a9fd91d79d23d2e37da739d8430b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89ab29e3bd710b6d77daa98257dfa2a5e1d014d5a3cae336ad2573b205f57af6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:55:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:55:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89ab29e3bd710b6d77daa98257dfa2a5e1d014d5a3cae336ad2573b205f57af6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6965623185e1285c7bc9c940c0900a2a9b3ad6aeebde61f8cad529fb66387d48"} {"level":"info","ts":"2026-07-24T17:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13d6ee4c96069f363dd0f65174d31cc4a024c901fb88bcc3a0205d994d785496"} {"level":"info","ts":"2026-07-24T17:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53c93881c2c48b82cd509ac59c6caac4677a14753cbdcd4c2de6a5e720d9e2ea"} {"level":"info","ts":"2026-07-24T17:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89ab29e3bd710b6d77daa98257dfa2a5e1d014d5a3cae336ad2573b205f57af6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbbb95ce20c889753d34f8a96c3901ae48a4448ba156b458c22c30d12780a5e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3b9b9d1fe514ee98475d28c6dc78ebaf5e9456a9d22de3344d47e2334ec0b02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:55:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:55:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3b9b9d1fe514ee98475d28c6dc78ebaf5e9456a9d22de3344d47e2334ec0b02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9df57bab60148e217eee288eb72349758654a9fd91d79d23d2e37da739d8430b"} {"level":"info","ts":"2026-07-24T17:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19fb692e387fdc84f937a59a85ec8a848f8af4a9521ec81b3b6f22737484fa4f"} {"level":"info","ts":"2026-07-24T17:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3b9b9d1fe514ee98475d28c6dc78ebaf5e9456a9d22de3344d47e2334ec0b02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f48736e851e02fb1528c9e951f2005d2d47bde0704b235ef389b67624b5f7f5e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26aa499fa2f7c92395163994f64b6b90204ee144f82302be6677ce717386069d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:55:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:55:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["26aa499fa2f7c92395163994f64b6b90204ee144f82302be6677ce717386069d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89ab29e3bd710b6d77daa98257dfa2a5e1d014d5a3cae336ad2573b205f57af6"} {"level":"info","ts":"2026-07-24T17:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3b9b9d1fe514ee98475d28c6dc78ebaf5e9456a9d22de3344d47e2334ec0b02"} {"level":"info","ts":"2026-07-24T17:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26aa499fa2f7c92395163994f64b6b90204ee144f82302be6677ce717386069d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73653ac8666fcd79b5d78d07300f1788de2c35ef7168a1a4bda9693c80a0cc77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:55:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:55:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73653ac8666fcd79b5d78d07300f1788de2c35ef7168a1a4bda9693c80a0cc77"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26aa499fa2f7c92395163994f64b6b90204ee144f82302be6677ce717386069d"} {"level":"info","ts":"2026-07-24T17:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73653ac8666fcd79b5d78d07300f1788de2c35ef7168a1a4bda9693c80a0cc77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ecd9d402164f27bff83003ae6a2f16b4cc44d47181c160a1eb20d37ff16990b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:55:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:55:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ecd9d402164f27bff83003ae6a2f16b4cc44d47181c160a1eb20d37ff16990b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73653ac8666fcd79b5d78d07300f1788de2c35ef7168a1a4bda9693c80a0cc77"} {"level":"info","ts":"2026-07-24T17:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ecd9d402164f27bff83003ae6a2f16b4cc44d47181c160a1eb20d37ff16990b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6965623185e1285c7bc9c940c0900a2a9b3ad6aeebde61f8cad529fb66387d48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13d6ee4c96069f363dd0f65174d31cc4a024c901fb88bcc3a0205d994d785496","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:55:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:55:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13d6ee4c96069f363dd0f65174d31cc4a024c901fb88bcc3a0205d994d785496"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ecd9d402164f27bff83003ae6a2f16b4cc44d47181c160a1eb20d37ff16990b"} {"level":"info","ts":"2026-07-24T17:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13d6ee4c96069f363dd0f65174d31cc4a024c901fb88bcc3a0205d994d785496","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53c93881c2c48b82cd509ac59c6caac4677a14753cbdcd4c2de6a5e720d9e2ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:55:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:55:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53c93881c2c48b82cd509ac59c6caac4677a14753cbdcd4c2de6a5e720d9e2ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53c93881c2c48b82cd509ac59c6caac4677a14753cbdcd4c2de6a5e720d9e2ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9df57bab60148e217eee288eb72349758654a9fd91d79d23d2e37da739d8430b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19fb692e387fdc84f937a59a85ec8a848f8af4a9521ec81b3b6f22737484fa4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:55:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:55:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19fb692e387fdc84f937a59a85ec8a848f8af4a9521ec81b3b6f22737484fa4f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13d6ee4c96069f363dd0f65174d31cc4a024c901fb88bcc3a0205d994d785496"} {"level":"info","ts":"2026-07-24T17:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53c93881c2c48b82cd509ac59c6caac4677a14753cbdcd4c2de6a5e720d9e2ea"} {"level":"info","ts":"2026-07-24T17:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19fb692e387fdc84f937a59a85ec8a848f8af4a9521ec81b3b6f22737484fa4f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89ab29e3bd710b6d77daa98257dfa2a5e1d014d5a3cae336ad2573b205f57af6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3b9b9d1fe514ee98475d28c6dc78ebaf5e9456a9d22de3344d47e2334ec0b02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26aa499fa2f7c92395163994f64b6b90204ee144f82302be6677ce717386069d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73653ac8666fcd79b5d78d07300f1788de2c35ef7168a1a4bda9693c80a0cc77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ecd9d402164f27bff83003ae6a2f16b4cc44d47181c160a1eb20d37ff16990b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13d6ee4c96069f363dd0f65174d31cc4a024c901fb88bcc3a0205d994d785496","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53c93881c2c48b82cd509ac59c6caac4677a14753cbdcd4c2de6a5e720d9e2ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19fb692e387fdc84f937a59a85ec8a848f8af4a9521ec81b3b6f22737484fa4f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19fb692e387fdc84f937a59a85ec8a848f8af4a9521ec81b3b6f22737484fa4f"} {"level":"info","ts":"2026-07-24T17:55:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f17575b4-901e-4c59-9c94-3ad1fec421e9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59824","PortSpecifier":{"PortValue":59824}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f17575b4-901e-4c59-9c94-3ad1fec421e9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-bb94b3.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:55:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f17575b4-901e-4c59-9c94-3ad1fec421e9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59824","PortSpecifier":{"PortValue":59824}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915739,"nanos":757283884},"http":{"id":"f17575b4-901e-4c59-9c94-3ad1fec421e9","method":"POST","headers":{":authority":"e2e-shared-a-bb94b3.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:55:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f17575b4-901e-4c59-9c94-3ad1fec421e9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T17:55:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f17575b4-901e-4c59-9c94-3ad1fec421e9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"badbe5d4-7ab5-425e-9873-63296dbdc8e7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2af0cd97-f569-450c-a76b-6c8d1b91d569"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/69d61257011a"]}} {"level":"debug","ts":"2026-07-24T17:55:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f17575b4-901e-4c59-9c94-3ad1fec421e9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/69d61257011a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2af0cd97-f569-450c-a76b-6c8d1b91d569"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"badbe5d4-7ab5-425e-9873-63296dbdc8e7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f3b9b9d1fe514ee98475d28c6dc78ebaf5e9456a9d22de3344d47e2334ec0b02"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bb94b3.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:55:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f17575b4-901e-4c59-9c94-3ad1fec421e9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:55:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f17575b4-901e-4c59-9c94-3ad1fec421e9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:55:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f17575b4-901e-4c59-9c94-3ad1fec421e9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bb94b3/rate-test-model-bb94b3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bb94b3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:55:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f17575b4-901e-4c59-9c94-3ad1fec421e9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T17:55:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f17575b4-901e-4c59-9c94-3ad1fec421e9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:55:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f17575b4-901e-4c59-9c94-3ad1fec421e9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T17:55:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f17575b4-901e-4c59-9c94-3ad1fec421e9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:55:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f17575b4-901e-4c59-9c94-3ad1fec421e9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:55:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"00e4c299-eb06-43e7-8947-9c396ed715a2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:58212","PortSpecifier":{"PortValue":58212}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"00e4c299-eb06-43e7-8947-9c396ed715a2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-5c7cfc.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:55:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"00e4c299-eb06-43e7-8947-9c396ed715a2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:58212","PortSpecifier":{"PortValue":58212}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915739,"nanos":798688757},"http":{"id":"00e4c299-eb06-43e7-8947-9c396ed715a2","method":"POST","headers":{":authority":"e2e-shared-b-5c7cfc.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:55:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"00e4c299-eb06-43e7-8947-9c396ed715a2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T17:55:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"00e4c299-eb06-43e7-8947-9c396ed715a2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"badbe5d4-7ab5-425e-9873-63296dbdc8e7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2af0cd97-f569-450c-a76b-6c8d1b91d569"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/69d61257011a"]}} {"level":"debug","ts":"2026-07-24T17:55:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"00e4c299-eb06-43e7-8947-9c396ed715a2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/69d61257011a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2af0cd97-f569-450c-a76b-6c8d1b91d569"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"badbe5d4-7ab5-425e-9873-63296dbdc8e7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-5c7cfc.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:55:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00e4c299-eb06-43e7-8947-9c396ed715a2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:55:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00e4c299-eb06-43e7-8947-9c396ed715a2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:55:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00e4c299-eb06-43e7-8947-9c396ed715a2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5c7cfc/rate-test-model-5c7cfc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-5c7cfc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:55:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"00e4c299-eb06-43e7-8947-9c396ed715a2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T17:55:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00e4c299-eb06-43e7-8947-9c396ed715a2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T17:55:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00e4c299-eb06-43e7-8947-9c396ed715a2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-24T17:55:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"00e4c299-eb06-43e7-8947-9c396ed715a2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:55:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"00e4c299-eb06-43e7-8947-9c396ed715a2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:55:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8f9e9a8e-c3d5-4154-9ae4-2b2efc19a477","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59828","PortSpecifier":{"PortValue":59828}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8f9e9a8e-c3d5-4154-9ae4-2b2efc19a477","method":"POST","path":"/ai-tenant-e2e-shared-a-bb94b3/rate-test-model-bb94b3/v1/completions","host":"e2e-shared-a-bb94b3.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:55:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8f9e9a8e-c3d5-4154-9ae4-2b2efc19a477","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59828","PortSpecifier":{"PortValue":59828}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915739,"nanos":839979463},"http":{"id":"8f9e9a8e-c3d5-4154-9ae4-2b2efc19a477","method":"POST","headers":{":authority":"e2e-shared-a-bb94b3.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-bb94b3/rate-test-model-bb94b3/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:55:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8f9e9a8e-c3d5-4154-9ae4-2b2efc19a477","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-3y1xAQl8pWXRxhFq_B3qBNJ8Ril9sV4GT50yUt6qyl5jWk8mbJhtTEzbtOoM"} {"level":"debug","ts":"2026-07-24T17:55:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8f9e9a8e-c3d5-4154-9ae4-2b2efc19a477","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bb94b3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-3y1xAQl8pWXRxhFq_B3qBNJ8Ril9sV4GT50yUt6qyl5jWk8mbJhtTEzbtOoM\"}"} {"level":"debug","ts":"2026-07-24T17:55:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8f9e9a8e-c3d5-4154-9ae4-2b2efc19a477","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bb94b3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6ef5f277-affb-4028-aafa-653c34e4b88e","keyName":"e2e-rate-a-b40053","subscription":"e2e-rate-iso-a-b40053","tenant":"e2e-shared-a-bb94b3","userId":"6ef5f277-affb-4028-aafa-653c34e4b88e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T17:55:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8f9e9a8e-c3d5-4154-9ae4-2b2efc19a477","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-bb94b3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-bb94b3/rate-test-model-bb94b3\",\"requestedSubscription\":\"e2e-rate-iso-a-b40053\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T17:55:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8f9e9a8e-c3d5-4154-9ae4-2b2efc19a477","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bb94b3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-bb94b3/models/facebook/opt-125m","name":"rate-test-model-bb94b3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b40053","namespace":"ai-tenant-e2e-shared-a-bb94b3","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-bb94b3/rate-test-model-bb94b3"}} {"level":"debug","ts":"2026-07-24T17:55:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8f9e9a8e-c3d5-4154-9ae4-2b2efc19a477","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:55:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f9e9a8e-c3d5-4154-9ae4-2b2efc19a477","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:55:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f9e9a8e-c3d5-4154-9ae4-2b2efc19a477","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:55:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f9e9a8e-c3d5-4154-9ae4-2b2efc19a477","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bb94b3/rate-test-model-bb94b3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bb94b3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:55:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f9e9a8e-c3d5-4154-9ae4-2b2efc19a477","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:55:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f9e9a8e-c3d5-4154-9ae4-2b2efc19a477","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:55:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f9e9a8e-c3d5-4154-9ae4-2b2efc19a477","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T17:55:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f9e9a8e-c3d5-4154-9ae4-2b2efc19a477","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b40053"} {"level":"debug","ts":"2026-07-24T17:55:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f9e9a8e-c3d5-4154-9ae4-2b2efc19a477","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6ef5f277-affb-4028-aafa-653c34e4b88e","keyName":"e2e-rate-a-b40053","selected_subscription":"e2e-rate-iso-a-b40053","selected_subscription_key":"ai-tenant-e2e-shared-a-bb94b3/e2e-rate-iso-a-b40053@ai-tenant-e2e-shared-a-bb94b3/rate-test-model-bb94b3","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-bb94b3/models/facebook/opt-125m","name":"rate-test-model-bb94b3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b40053","namespace":"ai-tenant-e2e-shared-a-bb94b3","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-bb94b3/rate-test-model-bb94b3"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T17:55:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8f9e9a8e-c3d5-4154-9ae4-2b2efc19a477","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:55:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8f9e9a8e-c3d5-4154-9ae4-2b2efc19a477","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:55:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f95de8bc-e0a1-4a69-b302-63808bc43823","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59830","PortSpecifier":{"PortValue":59830}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f95de8bc-e0a1-4a69-b302-63808bc43823","method":"POST","path":"/ai-tenant-e2e-shared-a-bb94b3/rate-test-model-bb94b3/v1/completions","host":"e2e-shared-a-bb94b3.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:55:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f95de8bc-e0a1-4a69-b302-63808bc43823","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59830","PortSpecifier":{"PortValue":59830}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915740,"nanos":931891656},"http":{"id":"f95de8bc-e0a1-4a69-b302-63808bc43823","method":"POST","headers":{":authority":"e2e-shared-a-bb94b3.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-bb94b3/rate-test-model-bb94b3/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:55:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f95de8bc-e0a1-4a69-b302-63808bc43823","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-3y1xAQl8pWXRxhFq_B3qBNJ8Ril9sV4GT50yUt6qyl5jWk8mbJhtTEzbtOoM"} {"level":"debug","ts":"2026-07-24T17:55:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f95de8bc-e0a1-4a69-b302-63808bc43823","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bb94b3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-3y1xAQl8pWXRxhFq_B3qBNJ8Ril9sV4GT50yUt6qyl5jWk8mbJhtTEzbtOoM\"}"} {"level":"debug","ts":"2026-07-24T17:55:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f95de8bc-e0a1-4a69-b302-63808bc43823","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bb94b3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6ef5f277-affb-4028-aafa-653c34e4b88e","keyName":"e2e-rate-a-b40053","subscription":"e2e-rate-iso-a-b40053","tenant":"e2e-shared-a-bb94b3","userId":"6ef5f277-affb-4028-aafa-653c34e4b88e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T17:55:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f95de8bc-e0a1-4a69-b302-63808bc43823","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-bb94b3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-bb94b3/rate-test-model-bb94b3\",\"requestedSubscription\":\"e2e-rate-iso-a-b40053\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T17:55:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f95de8bc-e0a1-4a69-b302-63808bc43823","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bb94b3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-bb94b3/models/facebook/opt-125m","name":"rate-test-model-bb94b3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b40053","namespace":"ai-tenant-e2e-shared-a-bb94b3","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-bb94b3/rate-test-model-bb94b3"}} {"level":"debug","ts":"2026-07-24T17:55:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f95de8bc-e0a1-4a69-b302-63808bc43823","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:55:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f95de8bc-e0a1-4a69-b302-63808bc43823","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:55:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f95de8bc-e0a1-4a69-b302-63808bc43823","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:55:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f95de8bc-e0a1-4a69-b302-63808bc43823","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bb94b3/rate-test-model-bb94b3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bb94b3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:55:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f95de8bc-e0a1-4a69-b302-63808bc43823","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:55:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f95de8bc-e0a1-4a69-b302-63808bc43823","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:55:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f95de8bc-e0a1-4a69-b302-63808bc43823","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b40053"} {"level":"debug","ts":"2026-07-24T17:55:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f95de8bc-e0a1-4a69-b302-63808bc43823","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T17:55:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f95de8bc-e0a1-4a69-b302-63808bc43823","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6ef5f277-affb-4028-aafa-653c34e4b88e","keyName":"e2e-rate-a-b40053","selected_subscription":"e2e-rate-iso-a-b40053","selected_subscription_key":"ai-tenant-e2e-shared-a-bb94b3/e2e-rate-iso-a-b40053@ai-tenant-e2e-shared-a-bb94b3/rate-test-model-bb94b3","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-bb94b3/models/facebook/opt-125m","name":"rate-test-model-bb94b3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b40053","namespace":"ai-tenant-e2e-shared-a-bb94b3","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-bb94b3/rate-test-model-bb94b3"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T17:55:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f95de8bc-e0a1-4a69-b302-63808bc43823","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:55:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f95de8bc-e0a1-4a69-b302-63808bc43823","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:55:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"09b9da08-87ba-43b6-9f39-b701f6bb59b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59838","PortSpecifier":{"PortValue":59838}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"09b9da08-87ba-43b6-9f39-b701f6bb59b4","method":"POST","path":"/ai-tenant-e2e-shared-a-bb94b3/rate-test-model-bb94b3/v1/completions","host":"e2e-shared-a-bb94b3.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:55:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"09b9da08-87ba-43b6-9f39-b701f6bb59b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59838","PortSpecifier":{"PortValue":59838}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915741,"nanos":972277511},"http":{"id":"09b9da08-87ba-43b6-9f39-b701f6bb59b4","method":"POST","headers":{":authority":"e2e-shared-a-bb94b3.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-bb94b3/rate-test-model-bb94b3/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:55:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"09b9da08-87ba-43b6-9f39-b701f6bb59b4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-3y1xAQl8pWXRxhFq_B3qBNJ8Ril9sV4GT50yUt6qyl5jWk8mbJhtTEzbtOoM"} {"level":"debug","ts":"2026-07-24T17:55:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"09b9da08-87ba-43b6-9f39-b701f6bb59b4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bb94b3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-3y1xAQl8pWXRxhFq_B3qBNJ8Ril9sV4GT50yUt6qyl5jWk8mbJhtTEzbtOoM\"}"} {"level":"debug","ts":"2026-07-24T17:55:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"09b9da08-87ba-43b6-9f39-b701f6bb59b4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bb94b3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6ef5f277-affb-4028-aafa-653c34e4b88e","keyName":"e2e-rate-a-b40053","subscription":"e2e-rate-iso-a-b40053","tenant":"e2e-shared-a-bb94b3","userId":"6ef5f277-affb-4028-aafa-653c34e4b88e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T17:55:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"09b9da08-87ba-43b6-9f39-b701f6bb59b4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-bb94b3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-bb94b3/rate-test-model-bb94b3\",\"requestedSubscription\":\"e2e-rate-iso-a-b40053\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T17:55:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"09b9da08-87ba-43b6-9f39-b701f6bb59b4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bb94b3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-bb94b3/models/facebook/opt-125m","name":"rate-test-model-bb94b3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b40053","namespace":"ai-tenant-e2e-shared-a-bb94b3","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-bb94b3/rate-test-model-bb94b3"}} {"level":"debug","ts":"2026-07-24T17:55:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"09b9da08-87ba-43b6-9f39-b701f6bb59b4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:55:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09b9da08-87ba-43b6-9f39-b701f6bb59b4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:55:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09b9da08-87ba-43b6-9f39-b701f6bb59b4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:55:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09b9da08-87ba-43b6-9f39-b701f6bb59b4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:55:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09b9da08-87ba-43b6-9f39-b701f6bb59b4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bb94b3/rate-test-model-bb94b3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bb94b3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:55:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09b9da08-87ba-43b6-9f39-b701f6bb59b4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:55:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09b9da08-87ba-43b6-9f39-b701f6bb59b4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T17:55:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09b9da08-87ba-43b6-9f39-b701f6bb59b4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b40053"} {"level":"debug","ts":"2026-07-24T17:55:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09b9da08-87ba-43b6-9f39-b701f6bb59b4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6ef5f277-affb-4028-aafa-653c34e4b88e","keyName":"e2e-rate-a-b40053","selected_subscription":"e2e-rate-iso-a-b40053","selected_subscription_key":"ai-tenant-e2e-shared-a-bb94b3/e2e-rate-iso-a-b40053@ai-tenant-e2e-shared-a-bb94b3/rate-test-model-bb94b3","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-bb94b3/models/facebook/opt-125m","name":"rate-test-model-bb94b3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b40053","namespace":"ai-tenant-e2e-shared-a-bb94b3","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-bb94b3/rate-test-model-bb94b3"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T17:55:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"09b9da08-87ba-43b6-9f39-b701f6bb59b4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:55:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"09b9da08-87ba-43b6-9f39-b701f6bb59b4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:55:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/17afb5d342d975cd8b53a095d10cc6269ed416025acd91a242073a52fc5bd88d"} {"level":"info","ts":"2026-07-24T17:55:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9df57bab60148e217eee288eb72349758654a9fd91d79d23d2e37da739d8430b"} {"level":"info","ts":"2026-07-24T17:55:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/19fb692e387fdc84f937a59a85ec8a848f8af4a9521ec81b3b6f22737484fa4f"} {"level":"info","ts":"2026-07-24T17:55:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3629998d23eaf0f326de3c87752bca62139e970e003c01f8f4921b271293d623"} {"level":"info","ts":"2026-07-24T17:55:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ff5b385ee16d96deff3882d13bc4001b6a95cfd00c8ae1ae2a5dbc334c7d8ed5"} {"level":"info","ts":"2026-07-24T17:55:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c"} {"level":"info","ts":"2026-07-24T17:55:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cacb13841af7c7658dd9c492acd53907b3a7b84847b24b36b41672e6f7db86ce"} {"level":"info","ts":"2026-07-24T17:55:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/53c93881c2c48b82cd509ac59c6caac4677a14753cbdcd4c2de6a5e720d9e2ea"} {"level":"info","ts":"2026-07-24T17:55:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9ecd9d402164f27bff83003ae6a2f16b4cc44d47181c160a1eb20d37ff16990b"} {"level":"info","ts":"2026-07-24T17:55:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5bc0e3ac59839925bd9744e9cac0d39210805459bb8574d731d9f49421b8e2c9"} {"level":"info","ts":"2026-07-24T17:55:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/73653ac8666fcd79b5d78d07300f1788de2c35ef7168a1a4bda9693c80a0cc77"} {"level":"info","ts":"2026-07-24T17:55:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f2eba0275d124f66d5d0ffd570f306409a3bdc5d78a8baac2134dd2d804ab4a"} {"level":"info","ts":"2026-07-24T17:55:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f48736e851e02fb1528c9e951f2005d2d47bde0704b235ef389b67624b5f7f5e"} {"level":"info","ts":"2026-07-24T17:55:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07"} {"level":"info","ts":"2026-07-24T17:55:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dbbb95ce20c889753d34f8a96c3901ae48a4448ba156b458c22c30d12780a5e8"} {"level":"info","ts":"2026-07-24T17:55:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9b708d3409dedceffe5e0cf61c5a874790de9c6f2af3f955df12fda622341b5c"} {"level":"info","ts":"2026-07-24T17:55:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f3b9b9d1fe514ee98475d28c6dc78ebaf5e9456a9d22de3344d47e2334ec0b02"} {"level":"info","ts":"2026-07-24T17:55:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/13d6ee4c96069f363dd0f65174d31cc4a024c901fb88bcc3a0205d994d785496"} {"level":"info","ts":"2026-07-24T17:55:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0b72db40cd1e032966222499a7004adff64c3414babf828cad082ed091e34e8f"} {"level":"info","ts":"2026-07-24T17:55:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6965623185e1285c7bc9c940c0900a2a9b3ad6aeebde61f8cad529fb66387d48"} {"level":"info","ts":"2026-07-24T17:55:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2146a5b217bf8cf6f53afb7dc295c3b725320eb14769160833ebb96f86fddd1c"} {"level":"info","ts":"2026-07-24T17:55:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/897beee98b27704b535aece1f3ba8bb3fe8bbaad4612048f0b792e96dbcbf52d"} {"level":"info","ts":"2026-07-24T17:55:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/26aa499fa2f7c92395163994f64b6b90204ee144f82302be6677ce717386069d"} {"level":"info","ts":"2026-07-24T17:55:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/89ab29e3bd710b6d77daa98257dfa2a5e1d014d5a3cae336ad2573b205f57af6"} {"level":"debug","ts":"2026-07-24T17:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ecd9d402164f27bff83003ae6a2f16b4cc44d47181c160a1eb20d37ff16990b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:55:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:55:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ecd9d402164f27bff83003ae6a2f16b4cc44d47181c160a1eb20d37ff16990b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ecd9d402164f27bff83003ae6a2f16b4cc44d47181c160a1eb20d37ff16990b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ecd9d402164f27bff83003ae6a2f16b4cc44d47181c160a1eb20d37ff16990b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ecd9d402164f27bff83003ae6a2f16b4cc44d47181c160a1eb20d37ff16990b"} {"level":"debug","ts":"2026-07-24T17:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ecd9d402164f27bff83003ae6a2f16b4cc44d47181c160a1eb20d37ff16990b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ecd9d402164f27bff83003ae6a2f16b4cc44d47181c160a1eb20d37ff16990b"} {"level":"debug","ts":"2026-07-24T17:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ecd9d402164f27bff83003ae6a2f16b4cc44d47181c160a1eb20d37ff16990b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:55:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:55:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ecd9d402164f27bff83003ae6a2f16b4cc44d47181c160a1eb20d37ff16990b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ecd9d402164f27bff83003ae6a2f16b4cc44d47181c160a1eb20d37ff16990b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ecd9d402164f27bff83003ae6a2f16b4cc44d47181c160a1eb20d37ff16990b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:55:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:55:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ecd9d402164f27bff83003ae6a2f16b4cc44d47181c160a1eb20d37ff16990b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ecd9d402164f27bff83003ae6a2f16b4cc44d47181c160a1eb20d37ff16990b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ecd9d402164f27bff83003ae6a2f16b4cc44d47181c160a1eb20d37ff16990b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ecd9d402164f27bff83003ae6a2f16b4cc44d47181c160a1eb20d37ff16990b"} {"level":"debug","ts":"2026-07-24T17:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ecd9d402164f27bff83003ae6a2f16b4cc44d47181c160a1eb20d37ff16990b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ecd9d402164f27bff83003ae6a2f16b4cc44d47181c160a1eb20d37ff16990b"} {"level":"debug","ts":"2026-07-24T17:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ecd9d402164f27bff83003ae6a2f16b4cc44d47181c160a1eb20d37ff16990b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:55:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:55:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ecd9d402164f27bff83003ae6a2f16b4cc44d47181c160a1eb20d37ff16990b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ecd9d402164f27bff83003ae6a2f16b4cc44d47181c160a1eb20d37ff16990b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ecd9d402164f27bff83003ae6a2f16b4cc44d47181c160a1eb20d37ff16990b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:55:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:55:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ecd9d402164f27bff83003ae6a2f16b4cc44d47181c160a1eb20d37ff16990b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ecd9d402164f27bff83003ae6a2f16b4cc44d47181c160a1eb20d37ff16990b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ecd9d402164f27bff83003ae6a2f16b4cc44d47181c160a1eb20d37ff16990b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ecd9d402164f27bff83003ae6a2f16b4cc44d47181c160a1eb20d37ff16990b"} {"level":"debug","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ecd9d402164f27bff83003ae6a2f16b4cc44d47181c160a1eb20d37ff16990b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ecd9d402164f27bff83003ae6a2f16b4cc44d47181c160a1eb20d37ff16990b"} {"level":"debug","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ecd9d402164f27bff83003ae6a2f16b4cc44d47181c160a1eb20d37ff16990b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:55:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:55:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ecd9d402164f27bff83003ae6a2f16b4cc44d47181c160a1eb20d37ff16990b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ecd9d402164f27bff83003ae6a2f16b4cc44d47181c160a1eb20d37ff16990b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ecd9d402164f27bff83003ae6a2f16b4cc44d47181c160a1eb20d37ff16990b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ecd9d402164f27bff83003ae6a2f16b4cc44d47181c160a1eb20d37ff16990b"} {"level":"debug","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13d6ee4c96069f363dd0f65174d31cc4a024c901fb88bcc3a0205d994d785496","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:55:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:55:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13d6ee4c96069f363dd0f65174d31cc4a024c901fb88bcc3a0205d994d785496","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13d6ee4c96069f363dd0f65174d31cc4a024c901fb88bcc3a0205d994d785496","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13d6ee4c96069f363dd0f65174d31cc4a024c901fb88bcc3a0205d994d785496","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13d6ee4c96069f363dd0f65174d31cc4a024c901fb88bcc3a0205d994d785496"} {"level":"debug","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13d6ee4c96069f363dd0f65174d31cc4a024c901fb88bcc3a0205d994d785496","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13d6ee4c96069f363dd0f65174d31cc4a024c901fb88bcc3a0205d994d785496"} {"level":"debug","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13d6ee4c96069f363dd0f65174d31cc4a024c901fb88bcc3a0205d994d785496","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:55:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:55:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13d6ee4c96069f363dd0f65174d31cc4a024c901fb88bcc3a0205d994d785496"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13d6ee4c96069f363dd0f65174d31cc4a024c901fb88bcc3a0205d994d785496","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13d6ee4c96069f363dd0f65174d31cc4a024c901fb88bcc3a0205d994d785496","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f48736e851e02fb1528c9e951f2005d2d47bde0704b235ef389b67624b5f7f5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:55:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:55:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13d6ee4c96069f363dd0f65174d31cc4a024c901fb88bcc3a0205d994d785496"} {"level":"info","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f48736e851e02fb1528c9e951f2005d2d47bde0704b235ef389b67624b5f7f5e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f48736e851e02fb1528c9e951f2005d2d47bde0704b235ef389b67624b5f7f5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:55:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:55:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f48736e851e02fb1528c9e951f2005d2d47bde0704b235ef389b67624b5f7f5e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f48736e851e02fb1528c9e951f2005d2d47bde0704b235ef389b67624b5f7f5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:55:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:55:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f48736e851e02fb1528c9e951f2005d2d47bde0704b235ef389b67624b5f7f5e"} {"level":"error","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f48736e851e02fb1528c9e951f2005d2d47bde0704b235ef389b67624b5f7f5e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f48736e851e02fb1528c9e951f2005d2d47bde0704b235ef389b67624b5f7f5e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f48736e851e02fb1528c9e951f2005d2d47bde0704b235ef389b67624b5f7f5e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f48736e851e02fb1528c9e951f2005d2d47bde0704b235ef389b67624b5f7f5e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f48736e851e02fb1528c9e951f2005d2d47bde0704b235ef389b67624b5f7f5e"} {"level":"debug","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cacb13841af7c7658dd9c492acd53907b3a7b84847b24b36b41672e6f7db86ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:55:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:55:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cacb13841af7c7658dd9c492acd53907b3a7b84847b24b36b41672e6f7db86ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cacb13841af7c7658dd9c492acd53907b3a7b84847b24b36b41672e6f7db86ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cacb13841af7c7658dd9c492acd53907b3a7b84847b24b36b41672e6f7db86ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f48736e851e02fb1528c9e951f2005d2d47bde0704b235ef389b67624b5f7f5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:55:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:55:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f48736e851e02fb1528c9e951f2005d2d47bde0704b235ef389b67624b5f7f5e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cacb13841af7c7658dd9c492acd53907b3a7b84847b24b36b41672e6f7db86ce"} {"level":"info","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f48736e851e02fb1528c9e951f2005d2d47bde0704b235ef389b67624b5f7f5e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f48736e851e02fb1528c9e951f2005d2d47bde0704b235ef389b67624b5f7f5e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cacb13841af7c7658dd9c492acd53907b3a7b84847b24b36b41672e6f7db86ce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cacb13841af7c7658dd9c492acd53907b3a7b84847b24b36b41672e6f7db86ce"} {"level":"info","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f48736e851e02fb1528c9e951f2005d2d47bde0704b235ef389b67624b5f7f5e"} {"level":"debug","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cacb13841af7c7658dd9c492acd53907b3a7b84847b24b36b41672e6f7db86ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:55:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:55:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cacb13841af7c7658dd9c492acd53907b3a7b84847b24b36b41672e6f7db86ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cacb13841af7c7658dd9c492acd53907b3a7b84847b24b36b41672e6f7db86ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cacb13841af7c7658dd9c492acd53907b3a7b84847b24b36b41672e6f7db86ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:55:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:55:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cacb13841af7c7658dd9c492acd53907b3a7b84847b24b36b41672e6f7db86ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3b9b9d1fe514ee98475d28c6dc78ebaf5e9456a9d22de3344d47e2334ec0b02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:55:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:55:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cacb13841af7c7658dd9c492acd53907b3a7b84847b24b36b41672e6f7db86ce"} {"level":"info","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3b9b9d1fe514ee98475d28c6dc78ebaf5e9456a9d22de3344d47e2334ec0b02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cacb13841af7c7658dd9c492acd53907b3a7b84847b24b36b41672e6f7db86ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:55:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:55:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cacb13841af7c7658dd9c492acd53907b3a7b84847b24b36b41672e6f7db86ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cacb13841af7c7658dd9c492acd53907b3a7b84847b24b36b41672e6f7db86ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3b9b9d1fe514ee98475d28c6dc78ebaf5e9456a9d22de3344d47e2334ec0b02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:55:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:55:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3b9b9d1fe514ee98475d28c6dc78ebaf5e9456a9d22de3344d47e2334ec0b02"} {"level":"info","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3b9b9d1fe514ee98475d28c6dc78ebaf5e9456a9d22de3344d47e2334ec0b02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cacb13841af7c7658dd9c492acd53907b3a7b84847b24b36b41672e6f7db86ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:55:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:55:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cacb13841af7c7658dd9c492acd53907b3a7b84847b24b36b41672e6f7db86ce"} {"level":"info","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cacb13841af7c7658dd9c492acd53907b3a7b84847b24b36b41672e6f7db86ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3b9b9d1fe514ee98475d28c6dc78ebaf5e9456a9d22de3344d47e2334ec0b02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cacb13841af7c7658dd9c492acd53907b3a7b84847b24b36b41672e6f7db86ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:55:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:55:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cacb13841af7c7658dd9c492acd53907b3a7b84847b24b36b41672e6f7db86ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cacb13841af7c7658dd9c492acd53907b3a7b84847b24b36b41672e6f7db86ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cacb13841af7c7658dd9c492acd53907b3a7b84847b24b36b41672e6f7db86ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:55:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:55:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cacb13841af7c7658dd9c492acd53907b3a7b84847b24b36b41672e6f7db86ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3b9b9d1fe514ee98475d28c6dc78ebaf5e9456a9d22de3344d47e2334ec0b02"} {"level":"error","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cacb13841af7c7658dd9c492acd53907b3a7b84847b24b36b41672e6f7db86ce","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cacb13841af7c7658dd9c492acd53907b3a7b84847b24b36b41672e6f7db86ce\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cacb13841af7c7658dd9c492acd53907b3a7b84847b24b36b41672e6f7db86ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:55:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:55:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cacb13841af7c7658dd9c492acd53907b3a7b84847b24b36b41672e6f7db86ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3b9b9d1fe514ee98475d28c6dc78ebaf5e9456a9d22de3344d47e2334ec0b02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:55:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:55:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3b9b9d1fe514ee98475d28c6dc78ebaf5e9456a9d22de3344d47e2334ec0b02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cacb13841af7c7658dd9c492acd53907b3a7b84847b24b36b41672e6f7db86ce"} {"level":"info","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3b9b9d1fe514ee98475d28c6dc78ebaf5e9456a9d22de3344d47e2334ec0b02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cacb13841af7c7658dd9c492acd53907b3a7b84847b24b36b41672e6f7db86ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3b9b9d1fe514ee98475d28c6dc78ebaf5e9456a9d22de3344d47e2334ec0b02","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cacb13841af7c7658dd9c492acd53907b3a7b84847b24b36b41672e6f7db86ce"} {"level":"debug","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cacb13841af7c7658dd9c492acd53907b3a7b84847b24b36b41672e6f7db86ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:55:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:55:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cacb13841af7c7658dd9c492acd53907b3a7b84847b24b36b41672e6f7db86ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cacb13841af7c7658dd9c492acd53907b3a7b84847b24b36b41672e6f7db86ce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3b9b9d1fe514ee98475d28c6dc78ebaf5e9456a9d22de3344d47e2334ec0b02"} {"level":"debug","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cacb13841af7c7658dd9c492acd53907b3a7b84847b24b36b41672e6f7db86ce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cacb13841af7c7658dd9c492acd53907b3a7b84847b24b36b41672e6f7db86ce"} {"level":"debug","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f2eba0275d124f66d5d0ffd570f306409a3bdc5d78a8baac2134dd2d804ab4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:55:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:55:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f2eba0275d124f66d5d0ffd570f306409a3bdc5d78a8baac2134dd2d804ab4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"897beee98b27704b535aece1f3ba8bb3fe8bbaad4612048f0b792e96dbcbf52d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:55:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:55:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f2eba0275d124f66d5d0ffd570f306409a3bdc5d78a8baac2134dd2d804ab4a"} {"level":"info","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"897beee98b27704b535aece1f3ba8bb3fe8bbaad4612048f0b792e96dbcbf52d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f2eba0275d124f66d5d0ffd570f306409a3bdc5d78a8baac2134dd2d804ab4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:55:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:55:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f2eba0275d124f66d5d0ffd570f306409a3bdc5d78a8baac2134dd2d804ab4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/897beee98b27704b535aece1f3ba8bb3fe8bbaad4612048f0b792e96dbcbf52d"} {"level":"info","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f2eba0275d124f66d5d0ffd570f306409a3bdc5d78a8baac2134dd2d804ab4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"897beee98b27704b535aece1f3ba8bb3fe8bbaad4612048f0b792e96dbcbf52d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:55:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:55:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["897beee98b27704b535aece1f3ba8bb3fe8bbaad4612048f0b792e96dbcbf52d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"897beee98b27704b535aece1f3ba8bb3fe8bbaad4612048f0b792e96dbcbf52d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f2eba0275d124f66d5d0ffd570f306409a3bdc5d78a8baac2134dd2d804ab4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:55:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:55:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f2eba0275d124f66d5d0ffd570f306409a3bdc5d78a8baac2134dd2d804ab4a"} {"level":"info","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f2eba0275d124f66d5d0ffd570f306409a3bdc5d78a8baac2134dd2d804ab4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"897beee98b27704b535aece1f3ba8bb3fe8bbaad4612048f0b792e96dbcbf52d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:55:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:55:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/897beee98b27704b535aece1f3ba8bb3fe8bbaad4612048f0b792e96dbcbf52d"} {"level":"info","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"897beee98b27704b535aece1f3ba8bb3fe8bbaad4612048f0b792e96dbcbf52d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f2eba0275d124f66d5d0ffd570f306409a3bdc5d78a8baac2134dd2d804ab4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"897beee98b27704b535aece1f3ba8bb3fe8bbaad4612048f0b792e96dbcbf52d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:55:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:55:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["897beee98b27704b535aece1f3ba8bb3fe8bbaad4612048f0b792e96dbcbf52d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"897beee98b27704b535aece1f3ba8bb3fe8bbaad4612048f0b792e96dbcbf52d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f2eba0275d124f66d5d0ffd570f306409a3bdc5d78a8baac2134dd2d804ab4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"897beee98b27704b535aece1f3ba8bb3fe8bbaad4612048f0b792e96dbcbf52d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:55:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:55:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["897beee98b27704b535aece1f3ba8bb3fe8bbaad4612048f0b792e96dbcbf52d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"897beee98b27704b535aece1f3ba8bb3fe8bbaad4612048f0b792e96dbcbf52d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"897beee98b27704b535aece1f3ba8bb3fe8bbaad4612048f0b792e96dbcbf52d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"897beee98b27704b535aece1f3ba8bb3fe8bbaad4612048f0b792e96dbcbf52d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f2eba0275d124f66d5d0ffd570f306409a3bdc5d78a8baac2134dd2d804ab4a"} {"level":"debug","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"897beee98b27704b535aece1f3ba8bb3fe8bbaad4612048f0b792e96dbcbf52d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:55:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:55:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"897beee98b27704b535aece1f3ba8bb3fe8bbaad4612048f0b792e96dbcbf52d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f2eba0275d124f66d5d0ffd570f306409a3bdc5d78a8baac2134dd2d804ab4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:55:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:55:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f2eba0275d124f66d5d0ffd570f306409a3bdc5d78a8baac2134dd2d804ab4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/897beee98b27704b535aece1f3ba8bb3fe8bbaad4612048f0b792e96dbcbf52d"} {"level":"info","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f2eba0275d124f66d5d0ffd570f306409a3bdc5d78a8baac2134dd2d804ab4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"897beee98b27704b535aece1f3ba8bb3fe8bbaad4612048f0b792e96dbcbf52d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f2eba0275d124f66d5d0ffd570f306409a3bdc5d78a8baac2134dd2d804ab4a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/897beee98b27704b535aece1f3ba8bb3fe8bbaad4612048f0b792e96dbcbf52d"} {"level":"debug","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"897beee98b27704b535aece1f3ba8bb3fe8bbaad4612048f0b792e96dbcbf52d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:55:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:55:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["897beee98b27704b535aece1f3ba8bb3fe8bbaad4612048f0b792e96dbcbf52d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"897beee98b27704b535aece1f3ba8bb3fe8bbaad4612048f0b792e96dbcbf52d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"897beee98b27704b535aece1f3ba8bb3fe8bbaad4612048f0b792e96dbcbf52d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f2eba0275d124f66d5d0ffd570f306409a3bdc5d78a8baac2134dd2d804ab4a"} {"level":"info","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/897beee98b27704b535aece1f3ba8bb3fe8bbaad4612048f0b792e96dbcbf52d"} {"level":"debug","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19fb692e387fdc84f937a59a85ec8a848f8af4a9521ec81b3b6f22737484fa4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:55:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:55:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19fb692e387fdc84f937a59a85ec8a848f8af4a9521ec81b3b6f22737484fa4f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19fb692e387fdc84f937a59a85ec8a848f8af4a9521ec81b3b6f22737484fa4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:55:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:55:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19fb692e387fdc84f937a59a85ec8a848f8af4a9521ec81b3b6f22737484fa4f"} {"level":"info","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19fb692e387fdc84f937a59a85ec8a848f8af4a9521ec81b3b6f22737484fa4f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19fb692e387fdc84f937a59a85ec8a848f8af4a9521ec81b3b6f22737484fa4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:55:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:55:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"19fb692e387fdc84f937a59a85ec8a848f8af4a9521ec81b3b6f22737484fa4f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"19fb692e387fdc84f937a59a85ec8a848f8af4a9521ec81b3b6f22737484fa4f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19fb692e387fdc84f937a59a85ec8a848f8af4a9521ec81b3b6f22737484fa4f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19fb692e387fdc84f937a59a85ec8a848f8af4a9521ec81b3b6f22737484fa4f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19fb692e387fdc84f937a59a85ec8a848f8af4a9521ec81b3b6f22737484fa4f"} {"level":"info","ts":"2026-07-24T17:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19fb692e387fdc84f937a59a85ec8a848f8af4a9521ec81b3b6f22737484fa4f"} {"level":"debug","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b72db40cd1e032966222499a7004adff64c3414babf828cad082ed091e34e8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:55:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:55:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b72db40cd1e032966222499a7004adff64c3414babf828cad082ed091e34e8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9df57bab60148e217eee288eb72349758654a9fd91d79d23d2e37da739d8430b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:55:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:55:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b72db40cd1e032966222499a7004adff64c3414babf828cad082ed091e34e8f"} {"level":"info","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9df57bab60148e217eee288eb72349758654a9fd91d79d23d2e37da739d8430b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b72db40cd1e032966222499a7004adff64c3414babf828cad082ed091e34e8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:55:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:55:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b72db40cd1e032966222499a7004adff64c3414babf828cad082ed091e34e8f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9df57bab60148e217eee288eb72349758654a9fd91d79d23d2e37da739d8430b"} {"level":"info","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b72db40cd1e032966222499a7004adff64c3414babf828cad082ed091e34e8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19fb692e387fdc84f937a59a85ec8a848f8af4a9521ec81b3b6f22737484fa4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:55:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:55:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19fb692e387fdc84f937a59a85ec8a848f8af4a9521ec81b3b6f22737484fa4f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19fb692e387fdc84f937a59a85ec8a848f8af4a9521ec81b3b6f22737484fa4f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9df57bab60148e217eee288eb72349758654a9fd91d79d23d2e37da739d8430b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:55:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:55:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9df57bab60148e217eee288eb72349758654a9fd91d79d23d2e37da739d8430b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b72db40cd1e032966222499a7004adff64c3414babf828cad082ed091e34e8f"} {"level":"info","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9df57bab60148e217eee288eb72349758654a9fd91d79d23d2e37da739d8430b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b72db40cd1e032966222499a7004adff64c3414babf828cad082ed091e34e8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19fb692e387fdc84f937a59a85ec8a848f8af4a9521ec81b3b6f22737484fa4f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9df57bab60148e217eee288eb72349758654a9fd91d79d23d2e37da739d8430b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:55:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:55:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9df57bab60148e217eee288eb72349758654a9fd91d79d23d2e37da739d8430b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9df57bab60148e217eee288eb72349758654a9fd91d79d23d2e37da739d8430b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9df57bab60148e217eee288eb72349758654a9fd91d79d23d2e37da739d8430b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9df57bab60148e217eee288eb72349758654a9fd91d79d23d2e37da739d8430b"} {"level":"debug","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9df57bab60148e217eee288eb72349758654a9fd91d79d23d2e37da739d8430b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:55:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:55:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9df57bab60148e217eee288eb72349758654a9fd91d79d23d2e37da739d8430b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19fb692e387fdc84f937a59a85ec8a848f8af4a9521ec81b3b6f22737484fa4f"} {"level":"info","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9df57bab60148e217eee288eb72349758654a9fd91d79d23d2e37da739d8430b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9df57bab60148e217eee288eb72349758654a9fd91d79d23d2e37da739d8430b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b72db40cd1e032966222499a7004adff64c3414babf828cad082ed091e34e8f"} {"level":"info","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9df57bab60148e217eee288eb72349758654a9fd91d79d23d2e37da739d8430b"} {"level":"debug","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff5b385ee16d96deff3882d13bc4001b6a95cfd00c8ae1ae2a5dbc334c7d8ed5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:55:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:55:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff5b385ee16d96deff3882d13bc4001b6a95cfd00c8ae1ae2a5dbc334c7d8ed5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3629998d23eaf0f326de3c87752bca62139e970e003c01f8f4921b271293d623","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:55:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:55:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff5b385ee16d96deff3882d13bc4001b6a95cfd00c8ae1ae2a5dbc334c7d8ed5"} {"level":"info","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3629998d23eaf0f326de3c87752bca62139e970e003c01f8f4921b271293d623","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff5b385ee16d96deff3882d13bc4001b6a95cfd00c8ae1ae2a5dbc334c7d8ed5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:55:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:55:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff5b385ee16d96deff3882d13bc4001b6a95cfd00c8ae1ae2a5dbc334c7d8ed5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3629998d23eaf0f326de3c87752bca62139e970e003c01f8f4921b271293d623"} {"level":"info","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff5b385ee16d96deff3882d13bc4001b6a95cfd00c8ae1ae2a5dbc334c7d8ed5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3629998d23eaf0f326de3c87752bca62139e970e003c01f8f4921b271293d623","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:55:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:55:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3629998d23eaf0f326de3c87752bca62139e970e003c01f8f4921b271293d623"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff5b385ee16d96deff3882d13bc4001b6a95cfd00c8ae1ae2a5dbc334c7d8ed5"} {"level":"info","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3629998d23eaf0f326de3c87752bca62139e970e003c01f8f4921b271293d623","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff5b385ee16d96deff3882d13bc4001b6a95cfd00c8ae1ae2a5dbc334c7d8ed5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3629998d23eaf0f326de3c87752bca62139e970e003c01f8f4921b271293d623","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:55:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:55:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3629998d23eaf0f326de3c87752bca62139e970e003c01f8f4921b271293d623"} {"level":"info","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3629998d23eaf0f326de3c87752bca62139e970e003c01f8f4921b271293d623","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3629998d23eaf0f326de3c87752bca62139e970e003c01f8f4921b271293d623","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:55:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:55:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3629998d23eaf0f326de3c87752bca62139e970e003c01f8f4921b271293d623"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff5b385ee16d96deff3882d13bc4001b6a95cfd00c8ae1ae2a5dbc334c7d8ed5"} {"level":"info","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3629998d23eaf0f326de3c87752bca62139e970e003c01f8f4921b271293d623"} {"level":"info","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3629998d23eaf0f326de3c87752bca62139e970e003c01f8f4921b271293d623","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:55:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:55:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07"} {"level":"info","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3629998d23eaf0f326de3c87752bca62139e970e003c01f8f4921b271293d623","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:55:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:55:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3629998d23eaf0f326de3c87752bca62139e970e003c01f8f4921b271293d623"} {"level":"info","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3629998d23eaf0f326de3c87752bca62139e970e003c01f8f4921b271293d623","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6965623185e1285c7bc9c940c0900a2a9b3ad6aeebde61f8cad529fb66387d48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:55:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:55:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6965623185e1285c7bc9c940c0900a2a9b3ad6aeebde61f8cad529fb66387d48"} {"level":"info","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07"} {"level":"info","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6965623185e1285c7bc9c940c0900a2a9b3ad6aeebde61f8cad529fb66387d48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:55:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:55:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3629998d23eaf0f326de3c87752bca62139e970e003c01f8f4921b271293d623"} {"level":"info","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26aa499fa2f7c92395163994f64b6b90204ee144f82302be6677ce717386069d"} {"level":"info","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3629998d23eaf0f326de3c87752bca62139e970e003c01f8f4921b271293d623","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:55:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:55:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3629998d23eaf0f326de3c87752bca62139e970e003c01f8f4921b271293d623"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6965623185e1285c7bc9c940c0900a2a9b3ad6aeebde61f8cad529fb66387d48"} {"level":"info","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3629998d23eaf0f326de3c87752bca62139e970e003c01f8f4921b271293d623","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26aa499fa2f7c92395163994f64b6b90204ee144f82302be6677ce717386069d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:55:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:55:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["26aa499fa2f7c92395163994f64b6b90204ee144f82302be6677ce717386069d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbbb95ce20c889753d34f8a96c3901ae48a4448ba156b458c22c30d12780a5e8"} {"level":"info","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26aa499fa2f7c92395163994f64b6b90204ee144f82302be6677ce717386069d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6965623185e1285c7bc9c940c0900a2a9b3ad6aeebde61f8cad529fb66387d48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:55:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:55:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6965623185e1285c7bc9c940c0900a2a9b3ad6aeebde61f8cad529fb66387d48"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07"} {"level":"info","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6965623185e1285c7bc9c940c0900a2a9b3ad6aeebde61f8cad529fb66387d48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbbb95ce20c889753d34f8a96c3901ae48a4448ba156b458c22c30d12780a5e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:55:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:55:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dbbb95ce20c889753d34f8a96c3901ae48a4448ba156b458c22c30d12780a5e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3629998d23eaf0f326de3c87752bca62139e970e003c01f8f4921b271293d623"} {"level":"info","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbbb95ce20c889753d34f8a96c3901ae48a4448ba156b458c22c30d12780a5e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3629998d23eaf0f326de3c87752bca62139e970e003c01f8f4921b271293d623","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26aa499fa2f7c92395163994f64b6b90204ee144f82302be6677ce717386069d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:55:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:55:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26aa499fa2f7c92395163994f64b6b90204ee144f82302be6677ce717386069d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53c93881c2c48b82cd509ac59c6caac4677a14753cbdcd4c2de6a5e720d9e2ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:55:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:55:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26aa499fa2f7c92395163994f64b6b90204ee144f82302be6677ce717386069d"} {"level":"info","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53c93881c2c48b82cd509ac59c6caac4677a14753cbdcd4c2de6a5e720d9e2ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6965623185e1285c7bc9c940c0900a2a9b3ad6aeebde61f8cad529fb66387d48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbbb95ce20c889753d34f8a96c3901ae48a4448ba156b458c22c30d12780a5e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26aa499fa2f7c92395163994f64b6b90204ee144f82302be6677ce717386069d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:55:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:55:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["26aa499fa2f7c92395163994f64b6b90204ee144f82302be6677ce717386069d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53c93881c2c48b82cd509ac59c6caac4677a14753cbdcd4c2de6a5e720d9e2ea"} {"level":"info","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26aa499fa2f7c92395163994f64b6b90204ee144f82302be6677ce717386069d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53c93881c2c48b82cd509ac59c6caac4677a14753cbdcd4c2de6a5e720d9e2ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:55:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:55:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53c93881c2c48b82cd509ac59c6caac4677a14753cbdcd4c2de6a5e720d9e2ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53c93881c2c48b82cd509ac59c6caac4677a14753cbdcd4c2de6a5e720d9e2ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26aa499fa2f7c92395163994f64b6b90204ee144f82302be6677ce717386069d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53c93881c2c48b82cd509ac59c6caac4677a14753cbdcd4c2de6a5e720d9e2ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:55:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:55:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6965623185e1285c7bc9c940c0900a2a9b3ad6aeebde61f8cad529fb66387d48"} {"level":"info","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbbb95ce20c889753d34f8a96c3901ae48a4448ba156b458c22c30d12780a5e8"} {"level":"info","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26aa499fa2f7c92395163994f64b6b90204ee144f82302be6677ce717386069d"} {"level":"debug","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53c93881c2c48b82cd509ac59c6caac4677a14753cbdcd4c2de6a5e720d9e2ea"} {"level":"debug","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:55:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:55:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c"} {"level":"info","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2146a5b217bf8cf6f53afb7dc295c3b725320eb14769160833ebb96f86fddd1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:55:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:55:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c"} {"level":"info","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2146a5b217bf8cf6f53afb7dc295c3b725320eb14769160833ebb96f86fddd1c"} {"level":"info","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2146a5b217bf8cf6f53afb7dc295c3b725320eb14769160833ebb96f86fddd1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:55:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:55:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2146a5b217bf8cf6f53afb7dc295c3b725320eb14769160833ebb96f86fddd1c"} {"level":"info","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2146a5b217bf8cf6f53afb7dc295c3b725320eb14769160833ebb96f86fddd1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:55:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:55:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2146a5b217bf8cf6f53afb7dc295c3b725320eb14769160833ebb96f86fddd1c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c"} {"level":"info","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b708d3409dedceffe5e0cf61c5a874790de9c6f2af3f955df12fda622341b5c"} {"level":"info","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2146a5b217bf8cf6f53afb7dc295c3b725320eb14769160833ebb96f86fddd1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9b708d3409dedceffe5e0cf61c5a874790de9c6f2af3f955df12fda622341b5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:55:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:55:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9b708d3409dedceffe5e0cf61c5a874790de9c6f2af3f955df12fda622341b5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17afb5d342d975cd8b53a095d10cc6269ed416025acd91a242073a52fc5bd88d"} {"level":"info","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2146a5b217bf8cf6f53afb7dc295c3b725320eb14769160833ebb96f86fddd1c"} {"level":"info","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9b708d3409dedceffe5e0cf61c5a874790de9c6f2af3f955df12fda622341b5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17afb5d342d975cd8b53a095d10cc6269ed416025acd91a242073a52fc5bd88d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:55:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:55:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17afb5d342d975cd8b53a095d10cc6269ed416025acd91a242073a52fc5bd88d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9b708d3409dedceffe5e0cf61c5a874790de9c6f2af3f955df12fda622341b5c"} {"level":"info","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bc0e3ac59839925bd9744e9cac0d39210805459bb8574d731d9f49421b8e2c9"} {"level":"info","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17afb5d342d975cd8b53a095d10cc6269ed416025acd91a242073a52fc5bd88d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2146a5b217bf8cf6f53afb7dc295c3b725320eb14769160833ebb96f86fddd1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9b708d3409dedceffe5e0cf61c5a874790de9c6f2af3f955df12fda622341b5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bc0e3ac59839925bd9744e9cac0d39210805459bb8574d731d9f49421b8e2c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:55:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:55:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5bc0e3ac59839925bd9744e9cac0d39210805459bb8574d731d9f49421b8e2c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89ab29e3bd710b6d77daa98257dfa2a5e1d014d5a3cae336ad2573b205f57af6"} {"level":"info","ts":"2026-07-24T17:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73653ac8666fcd79b5d78d07300f1788de2c35ef7168a1a4bda9693c80a0cc77"} {"level":"info","ts":"2026-07-24T17:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bc0e3ac59839925bd9744e9cac0d39210805459bb8574d731d9f49421b8e2c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89ab29e3bd710b6d77daa98257dfa2a5e1d014d5a3cae336ad2573b205f57af6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:55:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:55:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89ab29e3bd710b6d77daa98257dfa2a5e1d014d5a3cae336ad2573b205f57af6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17afb5d342d975cd8b53a095d10cc6269ed416025acd91a242073a52fc5bd88d"} {"level":"info","ts":"2026-07-24T17:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89ab29e3bd710b6d77daa98257dfa2a5e1d014d5a3cae336ad2573b205f57af6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73653ac8666fcd79b5d78d07300f1788de2c35ef7168a1a4bda9693c80a0cc77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:55:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:55:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73653ac8666fcd79b5d78d07300f1788de2c35ef7168a1a4bda9693c80a0cc77"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bc0e3ac59839925bd9744e9cac0d39210805459bb8574d731d9f49421b8e2c9"} {"level":"info","ts":"2026-07-24T17:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73653ac8666fcd79b5d78d07300f1788de2c35ef7168a1a4bda9693c80a0cc77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17afb5d342d975cd8b53a095d10cc6269ed416025acd91a242073a52fc5bd88d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bc0e3ac59839925bd9744e9cac0d39210805459bb8574d731d9f49421b8e2c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89ab29e3bd710b6d77daa98257dfa2a5e1d014d5a3cae336ad2573b205f57af6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:55:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:55:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89ab29e3bd710b6d77daa98257dfa2a5e1d014d5a3cae336ad2573b205f57af6"} {"level":"info","ts":"2026-07-24T17:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73653ac8666fcd79b5d78d07300f1788de2c35ef7168a1a4bda9693c80a0cc77"} {"level":"info","ts":"2026-07-24T17:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89ab29e3bd710b6d77daa98257dfa2a5e1d014d5a3cae336ad2573b205f57af6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73653ac8666fcd79b5d78d07300f1788de2c35ef7168a1a4bda9693c80a0cc77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89ab29e3bd710b6d77daa98257dfa2a5e1d014d5a3cae336ad2573b205f57af6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:55:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:55:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89ab29e3bd710b6d77daa98257dfa2a5e1d014d5a3cae336ad2573b205f57af6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89ab29e3bd710b6d77daa98257dfa2a5e1d014d5a3cae336ad2573b205f57af6"} {"level":"info","ts":"2026-07-24T17:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89ab29e3bd710b6d77daa98257dfa2a5e1d014d5a3cae336ad2573b205f57af6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89ab29e3bd710b6d77daa98257dfa2a5e1d014d5a3cae336ad2573b205f57af6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:55:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:55:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89ab29e3bd710b6d77daa98257dfa2a5e1d014d5a3cae336ad2573b205f57af6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89ab29e3bd710b6d77daa98257dfa2a5e1d014d5a3cae336ad2573b205f57af6"} {"level":"error","ts":"2026-07-24T17:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"89ab29e3bd710b6d77daa98257dfa2a5e1d014d5a3cae336ad2573b205f57af6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"89ab29e3bd710b6d77daa98257dfa2a5e1d014d5a3cae336ad2573b205f57af6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T17:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89ab29e3bd710b6d77daa98257dfa2a5e1d014d5a3cae336ad2573b205f57af6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89ab29e3bd710b6d77daa98257dfa2a5e1d014d5a3cae336ad2573b205f57af6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:55:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"391799bb-a7bf-47fd-bf66-4a160b555cd4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35000","PortSpecifier":{"PortValue":35000}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"391799bb-a7bf-47fd-bf66-4a160b555cd4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-bb94b3.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:55:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"391799bb-a7bf-47fd-bf66-4a160b555cd4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35000","PortSpecifier":{"PortValue":35000}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915759,"nanos":72768185},"http":{"id":"391799bb-a7bf-47fd-bf66-4a160b555cd4","method":"POST","headers":{":authority":"e2e-shared-a-bb94b3.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:55:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"391799bb-a7bf-47fd-bf66-4a160b555cd4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T17:55:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"391799bb-a7bf-47fd-bf66-4a160b555cd4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"badbe5d4-7ab5-425e-9873-63296dbdc8e7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2af0cd97-f569-450c-a76b-6c8d1b91d569"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/69d61257011a"]}} {"level":"debug","ts":"2026-07-24T17:55:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"391799bb-a7bf-47fd-bf66-4a160b555cd4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/69d61257011a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2af0cd97-f569-450c-a76b-6c8d1b91d569"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"badbe5d4-7ab5-425e-9873-63296dbdc8e7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f3b9b9d1fe514ee98475d28c6dc78ebaf5e9456a9d22de3344d47e2334ec0b02"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bb94b3.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:55:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"391799bb-a7bf-47fd-bf66-4a160b555cd4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:55:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"391799bb-a7bf-47fd-bf66-4a160b555cd4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:55:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"391799bb-a7bf-47fd-bf66-4a160b555cd4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bb94b3/rate-test-model-bb94b3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bb94b3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:55:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"391799bb-a7bf-47fd-bf66-4a160b555cd4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T17:55:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"391799bb-a7bf-47fd-bf66-4a160b555cd4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:55:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"391799bb-a7bf-47fd-bf66-4a160b555cd4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T17:55:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"391799bb-a7bf-47fd-bf66-4a160b555cd4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:55:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"391799bb-a7bf-47fd-bf66-4a160b555cd4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:55:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f35b9f95-988c-4ae9-a59d-2f83bcb21e4a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53164","PortSpecifier":{"PortValue":53164}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f35b9f95-988c-4ae9-a59d-2f83bcb21e4a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-5c7cfc.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:55:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f35b9f95-988c-4ae9-a59d-2f83bcb21e4a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53164","PortSpecifier":{"PortValue":53164}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915759,"nanos":119998238},"http":{"id":"f35b9f95-988c-4ae9-a59d-2f83bcb21e4a","method":"POST","headers":{":authority":"e2e-shared-b-5c7cfc.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:55:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f35b9f95-988c-4ae9-a59d-2f83bcb21e4a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T17:55:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f35b9f95-988c-4ae9-a59d-2f83bcb21e4a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"badbe5d4-7ab5-425e-9873-63296dbdc8e7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2af0cd97-f569-450c-a76b-6c8d1b91d569"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/69d61257011a"]}} {"level":"debug","ts":"2026-07-24T17:55:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f35b9f95-988c-4ae9-a59d-2f83bcb21e4a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/69d61257011a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2af0cd97-f569-450c-a76b-6c8d1b91d569"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"badbe5d4-7ab5-425e-9873-63296dbdc8e7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-5c7cfc.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:55:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f35b9f95-988c-4ae9-a59d-2f83bcb21e4a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:55:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f35b9f95-988c-4ae9-a59d-2f83bcb21e4a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:55:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f35b9f95-988c-4ae9-a59d-2f83bcb21e4a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5c7cfc/rate-test-model-5c7cfc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-5c7cfc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:55:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f35b9f95-988c-4ae9-a59d-2f83bcb21e4a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T17:55:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f35b9f95-988c-4ae9-a59d-2f83bcb21e4a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T17:55:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f35b9f95-988c-4ae9-a59d-2f83bcb21e4a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-24T17:55:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f35b9f95-988c-4ae9-a59d-2f83bcb21e4a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:55:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f35b9f95-988c-4ae9-a59d-2f83bcb21e4a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:55:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ef4f7d8c-ae5e-49ee-a944-5643252a145a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35008","PortSpecifier":{"PortValue":35008}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ef4f7d8c-ae5e-49ee-a944-5643252a145a","method":"POST","path":"/ai-tenant-e2e-shared-a-bb94b3/rate-test-model-bb94b3/v1/completions","host":"e2e-shared-a-bb94b3.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:55:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ef4f7d8c-ae5e-49ee-a944-5643252a145a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35008","PortSpecifier":{"PortValue":35008}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915759,"nanos":164518772},"http":{"id":"ef4f7d8c-ae5e-49ee-a944-5643252a145a","method":"POST","headers":{":authority":"e2e-shared-a-bb94b3.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-bb94b3/rate-test-model-bb94b3/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:55:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ef4f7d8c-ae5e-49ee-a944-5643252a145a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-17dvL34QTXHOpEhqR_ZfDS4MCB7F2F29SCsxpaGM3cZihZCeOaXWh3D3oEzWy"} {"level":"debug","ts":"2026-07-24T17:55:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ef4f7d8c-ae5e-49ee-a944-5643252a145a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bb94b3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-17dvL34QTXHOpEhqR_ZfDS4MCB7F2F29SCsxpaGM3cZihZCeOaXWh3D3oEzWy\"}"} {"level":"debug","ts":"2026-07-24T17:55:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ef4f7d8c-ae5e-49ee-a944-5643252a145a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bb94b3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"70e1e4c7-094f-46a7-aaa0-a57f02f145c2","keyName":"e2e-rate-a-957dfd","subscription":"e2e-rate-iso-a-957dfd","tenant":"e2e-shared-a-bb94b3","userId":"70e1e4c7-094f-46a7-aaa0-a57f02f145c2","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T17:55:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ef4f7d8c-ae5e-49ee-a944-5643252a145a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-bb94b3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-bb94b3/rate-test-model-bb94b3\",\"requestedSubscription\":\"e2e-rate-iso-a-957dfd\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T17:55:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ef4f7d8c-ae5e-49ee-a944-5643252a145a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bb94b3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-bb94b3/models/facebook/opt-125m","name":"rate-test-model-bb94b3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-957dfd","namespace":"ai-tenant-e2e-shared-a-bb94b3","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-bb94b3/rate-test-model-bb94b3"}} {"level":"debug","ts":"2026-07-24T17:55:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ef4f7d8c-ae5e-49ee-a944-5643252a145a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:55:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef4f7d8c-ae5e-49ee-a944-5643252a145a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:55:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef4f7d8c-ae5e-49ee-a944-5643252a145a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:55:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef4f7d8c-ae5e-49ee-a944-5643252a145a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bb94b3/rate-test-model-bb94b3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bb94b3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:55:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef4f7d8c-ae5e-49ee-a944-5643252a145a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:55:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef4f7d8c-ae5e-49ee-a944-5643252a145a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T17:55:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef4f7d8c-ae5e-49ee-a944-5643252a145a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:55:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef4f7d8c-ae5e-49ee-a944-5643252a145a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-957dfd"} {"level":"debug","ts":"2026-07-24T17:55:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef4f7d8c-ae5e-49ee-a944-5643252a145a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"70e1e4c7-094f-46a7-aaa0-a57f02f145c2","keyName":"e2e-rate-a-957dfd","selected_subscription":"e2e-rate-iso-a-957dfd","selected_subscription_key":"ai-tenant-e2e-shared-a-bb94b3/e2e-rate-iso-a-957dfd@ai-tenant-e2e-shared-a-bb94b3/rate-test-model-bb94b3","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-bb94b3/models/facebook/opt-125m","name":"rate-test-model-bb94b3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-957dfd","namespace":"ai-tenant-e2e-shared-a-bb94b3","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-bb94b3/rate-test-model-bb94b3"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T17:55:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ef4f7d8c-ae5e-49ee-a944-5643252a145a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:55:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ef4f7d8c-ae5e-49ee-a944-5643252a145a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:56:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b0da5b9-b319-49a8-93bd-89951306ec70","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35016","PortSpecifier":{"PortValue":35016}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6b0da5b9-b319-49a8-93bd-89951306ec70","method":"POST","path":"/ai-tenant-e2e-shared-a-bb94b3/rate-test-model-bb94b3/v1/completions","host":"e2e-shared-a-bb94b3.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:56:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b0da5b9-b319-49a8-93bd-89951306ec70","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35016","PortSpecifier":{"PortValue":35016}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915760,"nanos":208198851},"http":{"id":"6b0da5b9-b319-49a8-93bd-89951306ec70","method":"POST","headers":{":authority":"e2e-shared-a-bb94b3.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-bb94b3/rate-test-model-bb94b3/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:56:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6b0da5b9-b319-49a8-93bd-89951306ec70","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-17dvL34QTXHOpEhqR_ZfDS4MCB7F2F29SCsxpaGM3cZihZCeOaXWh3D3oEzWy"} {"level":"debug","ts":"2026-07-24T17:56:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6b0da5b9-b319-49a8-93bd-89951306ec70","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bb94b3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-17dvL34QTXHOpEhqR_ZfDS4MCB7F2F29SCsxpaGM3cZihZCeOaXWh3D3oEzWy\"}"} {"level":"debug","ts":"2026-07-24T17:56:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6b0da5b9-b319-49a8-93bd-89951306ec70","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bb94b3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"70e1e4c7-094f-46a7-aaa0-a57f02f145c2","keyName":"e2e-rate-a-957dfd","subscription":"e2e-rate-iso-a-957dfd","tenant":"e2e-shared-a-bb94b3","userId":"70e1e4c7-094f-46a7-aaa0-a57f02f145c2","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T17:56:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6b0da5b9-b319-49a8-93bd-89951306ec70","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-bb94b3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-bb94b3/rate-test-model-bb94b3\",\"requestedSubscription\":\"e2e-rate-iso-a-957dfd\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T17:56:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6b0da5b9-b319-49a8-93bd-89951306ec70","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bb94b3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-bb94b3/models/facebook/opt-125m","name":"rate-test-model-bb94b3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-957dfd","namespace":"ai-tenant-e2e-shared-a-bb94b3","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-bb94b3/rate-test-model-bb94b3"}} {"level":"debug","ts":"2026-07-24T17:56:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6b0da5b9-b319-49a8-93bd-89951306ec70","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:56:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b0da5b9-b319-49a8-93bd-89951306ec70","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:56:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b0da5b9-b319-49a8-93bd-89951306ec70","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:56:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b0da5b9-b319-49a8-93bd-89951306ec70","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bb94b3/rate-test-model-bb94b3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bb94b3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:56:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b0da5b9-b319-49a8-93bd-89951306ec70","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:56:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b0da5b9-b319-49a8-93bd-89951306ec70","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:56:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b0da5b9-b319-49a8-93bd-89951306ec70","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-957dfd"} {"level":"debug","ts":"2026-07-24T17:56:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b0da5b9-b319-49a8-93bd-89951306ec70","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T17:56:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b0da5b9-b319-49a8-93bd-89951306ec70","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"70e1e4c7-094f-46a7-aaa0-a57f02f145c2","keyName":"e2e-rate-a-957dfd","selected_subscription":"e2e-rate-iso-a-957dfd","selected_subscription_key":"ai-tenant-e2e-shared-a-bb94b3/e2e-rate-iso-a-957dfd@ai-tenant-e2e-shared-a-bb94b3/rate-test-model-bb94b3","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-bb94b3/models/facebook/opt-125m","name":"rate-test-model-bb94b3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-957dfd","namespace":"ai-tenant-e2e-shared-a-bb94b3","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-bb94b3/rate-test-model-bb94b3"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T17:56:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b0da5b9-b319-49a8-93bd-89951306ec70","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:56:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b0da5b9-b319-49a8-93bd-89951306ec70","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:56:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1845c79-e176-424c-9b6c-73156858511f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35022","PortSpecifier":{"PortValue":35022}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c1845c79-e176-424c-9b6c-73156858511f","method":"POST","path":"/ai-tenant-e2e-shared-a-bb94b3/rate-test-model-bb94b3/v1/completions","host":"e2e-shared-a-bb94b3.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:56:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1845c79-e176-424c-9b6c-73156858511f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35022","PortSpecifier":{"PortValue":35022}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915761,"nanos":248802121},"http":{"id":"c1845c79-e176-424c-9b6c-73156858511f","method":"POST","headers":{":authority":"e2e-shared-a-bb94b3.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-bb94b3/rate-test-model-bb94b3/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:56:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c1845c79-e176-424c-9b6c-73156858511f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-17dvL34QTXHOpEhqR_ZfDS4MCB7F2F29SCsxpaGM3cZihZCeOaXWh3D3oEzWy"} {"level":"debug","ts":"2026-07-24T17:56:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c1845c79-e176-424c-9b6c-73156858511f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bb94b3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-17dvL34QTXHOpEhqR_ZfDS4MCB7F2F29SCsxpaGM3cZihZCeOaXWh3D3oEzWy\"}"} {"level":"debug","ts":"2026-07-24T17:56:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c1845c79-e176-424c-9b6c-73156858511f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bb94b3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"70e1e4c7-094f-46a7-aaa0-a57f02f145c2","keyName":"e2e-rate-a-957dfd","subscription":"e2e-rate-iso-a-957dfd","tenant":"e2e-shared-a-bb94b3","userId":"70e1e4c7-094f-46a7-aaa0-a57f02f145c2","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T17:56:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c1845c79-e176-424c-9b6c-73156858511f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-bb94b3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-bb94b3/rate-test-model-bb94b3\",\"requestedSubscription\":\"e2e-rate-iso-a-957dfd\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T17:56:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c1845c79-e176-424c-9b6c-73156858511f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bb94b3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-bb94b3/models/facebook/opt-125m","name":"rate-test-model-bb94b3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-957dfd","namespace":"ai-tenant-e2e-shared-a-bb94b3","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-bb94b3/rate-test-model-bb94b3"}} {"level":"debug","ts":"2026-07-24T17:56:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c1845c79-e176-424c-9b6c-73156858511f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:56:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1845c79-e176-424c-9b6c-73156858511f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:56:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1845c79-e176-424c-9b6c-73156858511f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:56:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1845c79-e176-424c-9b6c-73156858511f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:56:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1845c79-e176-424c-9b6c-73156858511f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bb94b3/rate-test-model-bb94b3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-bb94b3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:56:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1845c79-e176-424c-9b6c-73156858511f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:56:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1845c79-e176-424c-9b6c-73156858511f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T17:56:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1845c79-e176-424c-9b6c-73156858511f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-957dfd"} {"level":"debug","ts":"2026-07-24T17:56:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1845c79-e176-424c-9b6c-73156858511f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"70e1e4c7-094f-46a7-aaa0-a57f02f145c2","keyName":"e2e-rate-a-957dfd","selected_subscription":"e2e-rate-iso-a-957dfd","selected_subscription_key":"ai-tenant-e2e-shared-a-bb94b3/e2e-rate-iso-a-957dfd@ai-tenant-e2e-shared-a-bb94b3/rate-test-model-bb94b3","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-bb94b3/models/facebook/opt-125m","name":"rate-test-model-bb94b3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-957dfd","namespace":"ai-tenant-e2e-shared-a-bb94b3","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-bb94b3/rate-test-model-bb94b3"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T17:56:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1845c79-e176-424c-9b6c-73156858511f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:56:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1845c79-e176-424c-9b6c-73156858511f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:56:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c3506668-c7ea-4ca3-8b41-cfd6369d901a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53178","PortSpecifier":{"PortValue":53178}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c3506668-c7ea-4ca3-8b41-cfd6369d901a","method":"POST","path":"/ai-tenant-e2e-shared-b-5c7cfc/rate-test-model-5c7cfc/v1/completions","host":"e2e-shared-b-5c7cfc.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:56:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c3506668-c7ea-4ca3-8b41-cfd6369d901a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53178","PortSpecifier":{"PortValue":53178}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915761,"nanos":283422376},"http":{"id":"c3506668-c7ea-4ca3-8b41-cfd6369d901a","method":"POST","headers":{":authority":"e2e-shared-b-5c7cfc.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-5c7cfc/rate-test-model-5c7cfc/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:56:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c3506668-c7ea-4ca3-8b41-cfd6369d901a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-pjjkuXRhVRh4rki2_Oe62OB9CMqTHc4S8FOr6kEJL8c9oOGAwZroCZaiXDIH"} {"level":"debug","ts":"2026-07-24T17:56:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c3506668-c7ea-4ca3-8b41-cfd6369d901a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-5c7cfc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-pjjkuXRhVRh4rki2_Oe62OB9CMqTHc4S8FOr6kEJL8c9oOGAwZroCZaiXDIH\"}"} {"level":"debug","ts":"2026-07-24T17:56:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c3506668-c7ea-4ca3-8b41-cfd6369d901a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-5c7cfc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5eb0f0ef-5a8d-4404-9eb1-a6524a3d9514","keyName":"e2e-rate-b-957dfd","subscription":"e2e-rate-iso-b-957dfd","tenant":"e2e-shared-b-5c7cfc","userId":"5eb0f0ef-5a8d-4404-9eb1-a6524a3d9514","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T17:56:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c3506668-c7ea-4ca3-8b41-cfd6369d901a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-5c7cfc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-5c7cfc/rate-test-model-5c7cfc\",\"requestedSubscription\":\"e2e-rate-iso-b-957dfd\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T17:56:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c3506668-c7ea-4ca3-8b41-cfd6369d901a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-5c7cfc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-5c7cfc/models/facebook/opt-125m","name":"rate-test-model-5c7cfc","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-957dfd","namespace":"ai-tenant-e2e-shared-b-5c7cfc","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-5c7cfc/rate-test-model-5c7cfc"}} {"level":"debug","ts":"2026-07-24T17:56:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c3506668-c7ea-4ca3-8b41-cfd6369d901a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:56:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3506668-c7ea-4ca3-8b41-cfd6369d901a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:56:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3506668-c7ea-4ca3-8b41-cfd6369d901a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:56:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3506668-c7ea-4ca3-8b41-cfd6369d901a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5c7cfc/rate-test-model-5c7cfc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-5c7cfc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:56:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3506668-c7ea-4ca3-8b41-cfd6369d901a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:56:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3506668-c7ea-4ca3-8b41-cfd6369d901a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:56:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3506668-c7ea-4ca3-8b41-cfd6369d901a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-957dfd"} {"level":"debug","ts":"2026-07-24T17:56:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3506668-c7ea-4ca3-8b41-cfd6369d901a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T17:56:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3506668-c7ea-4ca3-8b41-cfd6369d901a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5eb0f0ef-5a8d-4404-9eb1-a6524a3d9514","keyName":"e2e-rate-b-957dfd","selected_subscription":"e2e-rate-iso-b-957dfd","selected_subscription_key":"ai-tenant-e2e-shared-b-5c7cfc/e2e-rate-iso-b-957dfd@ai-tenant-e2e-shared-b-5c7cfc/rate-test-model-5c7cfc","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-5c7cfc/models/facebook/opt-125m","name":"rate-test-model-5c7cfc","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-957dfd","namespace":"ai-tenant-e2e-shared-b-5c7cfc","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-5c7cfc/rate-test-model-5c7cfc"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T17:56:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c3506668-c7ea-4ca3-8b41-cfd6369d901a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:56:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c3506668-c7ea-4ca3-8b41-cfd6369d901a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:56:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dbbb95ce20c889753d34f8a96c3901ae48a4448ba156b458c22c30d12780a5e8"} {"level":"info","ts":"2026-07-24T17:56:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2146a5b217bf8cf6f53afb7dc295c3b725320eb14769160833ebb96f86fddd1c"} {"level":"info","ts":"2026-07-24T17:56:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3629998d23eaf0f326de3c87752bca62139e970e003c01f8f4921b271293d623"} {"level":"info","ts":"2026-07-24T17:56:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/67ffdc888284fa1e2472967759793a2601496ae6ef32e1f7ba6a2aa122f3ff07"} {"level":"info","ts":"2026-07-24T17:56:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/13d6ee4c96069f363dd0f65174d31cc4a024c901fb88bcc3a0205d994d785496"} {"level":"info","ts":"2026-07-24T17:56:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f48736e851e02fb1528c9e951f2005d2d47bde0704b235ef389b67624b5f7f5e"} {"level":"info","ts":"2026-07-24T17:56:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f3b9b9d1fe514ee98475d28c6dc78ebaf5e9456a9d22de3344d47e2334ec0b02"} {"level":"info","ts":"2026-07-24T17:56:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cacb13841af7c7658dd9c492acd53907b3a7b84847b24b36b41672e6f7db86ce"} {"level":"info","ts":"2026-07-24T17:56:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/73653ac8666fcd79b5d78d07300f1788de2c35ef7168a1a4bda9693c80a0cc77"} {"level":"info","ts":"2026-07-24T17:56:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5bc0e3ac59839925bd9744e9cac0d39210805459bb8574d731d9f49421b8e2c9"} {"level":"info","ts":"2026-07-24T17:56:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f2eba0275d124f66d5d0ffd570f306409a3bdc5d78a8baac2134dd2d804ab4a"} {"level":"info","ts":"2026-07-24T17:56:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/26aa499fa2f7c92395163994f64b6b90204ee144f82302be6677ce717386069d"} {"level":"info","ts":"2026-07-24T17:56:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9ecd9d402164f27bff83003ae6a2f16b4cc44d47181c160a1eb20d37ff16990b"} {"level":"info","ts":"2026-07-24T17:56:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/19fb692e387fdc84f937a59a85ec8a848f8af4a9521ec81b3b6f22737484fa4f"} {"level":"info","ts":"2026-07-24T17:56:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3d14453b1d5b3691987523a02acbf922529902e0c6b71bcfb2002a7e1ced329c"} {"level":"info","ts":"2026-07-24T17:56:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/53c93881c2c48b82cd509ac59c6caac4677a14753cbdcd4c2de6a5e720d9e2ea"} {"level":"info","ts":"2026-07-24T17:56:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/89ab29e3bd710b6d77daa98257dfa2a5e1d014d5a3cae336ad2573b205f57af6"} {"level":"info","ts":"2026-07-24T17:56:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9df57bab60148e217eee288eb72349758654a9fd91d79d23d2e37da739d8430b"} {"level":"info","ts":"2026-07-24T17:56:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9b708d3409dedceffe5e0cf61c5a874790de9c6f2af3f955df12fda622341b5c"} {"level":"info","ts":"2026-07-24T17:56:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0b72db40cd1e032966222499a7004adff64c3414babf828cad082ed091e34e8f"} {"level":"info","ts":"2026-07-24T17:56:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/17afb5d342d975cd8b53a095d10cc6269ed416025acd91a242073a52fc5bd88d"} {"level":"info","ts":"2026-07-24T17:56:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6965623185e1285c7bc9c940c0900a2a9b3ad6aeebde61f8cad529fb66387d48"} {"level":"info","ts":"2026-07-24T17:56:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ff5b385ee16d96deff3882d13bc4001b6a95cfd00c8ae1ae2a5dbc334c7d8ed5"} {"level":"info","ts":"2026-07-24T17:56:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/897beee98b27704b535aece1f3ba8bb3fe8bbaad4612048f0b792e96dbcbf52d"} {"level":"info","ts":"2026-07-24T17:57:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"830f06ee-e3de-405c-b533-a003f94b8829","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:36096","PortSpecifier":{"PortValue":36096}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.20:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"830f06ee-e3de-405c-b533-a003f94b8829","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:57:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"830f06ee-e3de-405c-b533-a003f94b8829","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:36096","PortSpecifier":{"PortValue":36096}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.20:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915828,"nanos":482878243},"http":{"id":"830f06ee-e3de-405c-b533-a003f94b8829","method":"POST","headers":{":authority":"maas.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:57:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"830f06ee-e3de-405c-b533-a003f94b8829","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T17:57:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"830f06ee-e3de-405c-b533-a003f94b8829","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"badbe5d4-7ab5-425e-9873-63296dbdc8e7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2af0cd97-f569-450c-a76b-6c8d1b91d569"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/69d61257011a"]}} {"level":"debug","ts":"2026-07-24T17:57:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"830f06ee-e3de-405c-b533-a003f94b8829","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/69d61257011a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2af0cd97-f569-450c-a76b-6c8d1b91d569"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"badbe5d4-7ab5-425e-9873-63296dbdc8e7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.20:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:57:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"830f06ee-e3de-405c-b533-a003f94b8829","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:57:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"830f06ee-e3de-405c-b533-a003f94b8829","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:57:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"830f06ee-e3de-405c-b533-a003f94b8829","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:57:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"830f06ee-e3de-405c-b533-a003f94b8829","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T17:57:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"830f06ee-e3de-405c-b533-a003f94b8829","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T17:57:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"830f06ee-e3de-405c-b533-a003f94b8829","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-24T17:57:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"830f06ee-e3de-405c-b533-a003f94b8829","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:57:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"830f06ee-e3de-405c-b533-a003f94b8829","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:57:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fa5cca01-5572-47a1-b620-03c95902baa5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:36098","PortSpecifier":{"PortValue":36098}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.20:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fa5cca01-5572-47a1-b620-03c95902baa5","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:57:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fa5cca01-5572-47a1-b620-03c95902baa5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:36098","PortSpecifier":{"PortValue":36098}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.20:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915828,"nanos":536310243},"http":{"id":"fa5cca01-5572-47a1-b620-03c95902baa5","method":"POST","headers":{":authority":"maas.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:57:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fa5cca01-5572-47a1-b620-03c95902baa5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-17uYszuULcxaskJo6_p32a0ff52tpucRhkh04TwOCxq9tgC6xLYhKk34Ro1Fu"} {"level":"debug","ts":"2026-07-24T17:57:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fa5cca01-5572-47a1-b620-03c95902baa5","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-17uYszuULcxaskJo6_p32a0ff52tpucRhkh04TwOCxq9tgC6xLYhKk34Ro1Fu\"}"} {"level":"debug","ts":"2026-07-24T17:57:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fa5cca01-5572-47a1-b620-03c95902baa5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2e97f762-c0f5-41d7-b938-2afbfef3a61c","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"2e97f762-c0f5-41d7-b938-2afbfef3a61c","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T17:57:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fa5cca01-5572-47a1-b620-03c95902baa5","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T17:57:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fa5cca01-5572-47a1-b620-03c95902baa5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}} {"level":"debug","ts":"2026-07-24T17:57:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fa5cca01-5572-47a1-b620-03c95902baa5","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.20:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:57:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa5cca01-5572-47a1-b620-03c95902baa5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:57:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa5cca01-5572-47a1-b620-03c95902baa5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:57:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa5cca01-5572-47a1-b620-03c95902baa5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:57:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa5cca01-5572-47a1-b620-03c95902baa5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:57:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa5cca01-5572-47a1-b620-03c95902baa5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:57:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa5cca01-5572-47a1-b620-03c95902baa5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T17:57:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa5cca01-5572-47a1-b620-03c95902baa5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-07-24T17:57:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa5cca01-5572-47a1-b620-03c95902baa5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"2e97f762-c0f5-41d7-b938-2afbfef3a61c","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T17:57:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fa5cca01-5572-47a1-b620-03c95902baa5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:57:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fa5cca01-5572-47a1-b620-03c95902baa5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"676a1ee37a67ef4849e312d86013524035103a42afb1b42986efaddb1ed025b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:57:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:57:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"676a1ee37a67ef4849e312d86013524035103a42afb1b42986efaddb1ed025b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"676a1ee37a67ef4849e312d86013524035103a42afb1b42986efaddb1ed025b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"676a1ee37a67ef4849e312d86013524035103a42afb1b42986efaddb1ed025b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/676a1ee37a67ef4849e312d86013524035103a42afb1b42986efaddb1ed025b5"} {"level":"debug","ts":"2026-07-24T17:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"676a1ee37a67ef4849e312d86013524035103a42afb1b42986efaddb1ed025b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/676a1ee37a67ef4849e312d86013524035103a42afb1b42986efaddb1ed025b5"} {"level":"debug","ts":"2026-07-24T17:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"676a1ee37a67ef4849e312d86013524035103a42afb1b42986efaddb1ed025b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:57:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:57:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["676a1ee37a67ef4849e312d86013524035103a42afb1b42986efaddb1ed025b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"676a1ee37a67ef4849e312d86013524035103a42afb1b42986efaddb1ed025b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"676a1ee37a67ef4849e312d86013524035103a42afb1b42986efaddb1ed025b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:57:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:57:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"676a1ee37a67ef4849e312d86013524035103a42afb1b42986efaddb1ed025b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"676a1ee37a67ef4849e312d86013524035103a42afb1b42986efaddb1ed025b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"676a1ee37a67ef4849e312d86013524035103a42afb1b42986efaddb1ed025b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/676a1ee37a67ef4849e312d86013524035103a42afb1b42986efaddb1ed025b5"} {"level":"debug","ts":"2026-07-24T17:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"676a1ee37a67ef4849e312d86013524035103a42afb1b42986efaddb1ed025b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/676a1ee37a67ef4849e312d86013524035103a42afb1b42986efaddb1ed025b5"} {"level":"debug","ts":"2026-07-24T17:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"676a1ee37a67ef4849e312d86013524035103a42afb1b42986efaddb1ed025b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:57:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:57:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["676a1ee37a67ef4849e312d86013524035103a42afb1b42986efaddb1ed025b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"676a1ee37a67ef4849e312d86013524035103a42afb1b42986efaddb1ed025b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"676a1ee37a67ef4849e312d86013524035103a42afb1b42986efaddb1ed025b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9addec17370ab81eb7e2dd9df4ad51876d8736149cf0b254f1a57410c741b4e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:57:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:57:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/676a1ee37a67ef4849e312d86013524035103a42afb1b42986efaddb1ed025b5"} {"level":"info","ts":"2026-07-24T17:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9addec17370ab81eb7e2dd9df4ad51876d8736149cf0b254f1a57410c741b4e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9addec17370ab81eb7e2dd9df4ad51876d8736149cf0b254f1a57410c741b4e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:57:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:57:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9addec17370ab81eb7e2dd9df4ad51876d8736149cf0b254f1a57410c741b4e1"} {"level":"info","ts":"2026-07-24T17:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9addec17370ab81eb7e2dd9df4ad51876d8736149cf0b254f1a57410c741b4e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9addec17370ab81eb7e2dd9df4ad51876d8736149cf0b254f1a57410c741b4e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9addec17370ab81eb7e2dd9df4ad51876d8736149cf0b254f1a57410c741b4e1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9addec17370ab81eb7e2dd9df4ad51876d8736149cf0b254f1a57410c741b4e1"} {"level":"info","ts":"2026-07-24T17:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9addec17370ab81eb7e2dd9df4ad51876d8736149cf0b254f1a57410c741b4e1"} {"level":"debug","ts":"2026-07-24T17:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9addec17370ab81eb7e2dd9df4ad51876d8736149cf0b254f1a57410c741b4e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:57:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:57:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9addec17370ab81eb7e2dd9df4ad51876d8736149cf0b254f1a57410c741b4e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9addec17370ab81eb7e2dd9df4ad51876d8736149cf0b254f1a57410c741b4e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9addec17370ab81eb7e2dd9df4ad51876d8736149cf0b254f1a57410c741b4e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:57:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:57:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9addec17370ab81eb7e2dd9df4ad51876d8736149cf0b254f1a57410c741b4e1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9addec17370ab81eb7e2dd9df4ad51876d8736149cf0b254f1a57410c741b4e1"} {"level":"debug","ts":"2026-07-24T17:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9addec17370ab81eb7e2dd9df4ad51876d8736149cf0b254f1a57410c741b4e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:57:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:57:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9addec17370ab81eb7e2dd9df4ad51876d8736149cf0b254f1a57410c741b4e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9addec17370ab81eb7e2dd9df4ad51876d8736149cf0b254f1a57410c741b4e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9addec17370ab81eb7e2dd9df4ad51876d8736149cf0b254f1a57410c741b4e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9addec17370ab81eb7e2dd9df4ad51876d8736149cf0b254f1a57410c741b4e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:57:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:57:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9addec17370ab81eb7e2dd9df4ad51876d8736149cf0b254f1a57410c741b4e1"} {"level":"info","ts":"2026-07-24T17:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9addec17370ab81eb7e2dd9df4ad51876d8736149cf0b254f1a57410c741b4e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9addec17370ab81eb7e2dd9df4ad51876d8736149cf0b254f1a57410c741b4e1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9addec17370ab81eb7e2dd9df4ad51876d8736149cf0b254f1a57410c741b4e1"} {"level":"debug","ts":"2026-07-24T17:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9addec17370ab81eb7e2dd9df4ad51876d8736149cf0b254f1a57410c741b4e1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9addec17370ab81eb7e2dd9df4ad51876d8736149cf0b254f1a57410c741b4e1"} {"level":"debug","ts":"2026-07-24T17:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9addec17370ab81eb7e2dd9df4ad51876d8736149cf0b254f1a57410c741b4e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:57:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:57:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9addec17370ab81eb7e2dd9df4ad51876d8736149cf0b254f1a57410c741b4e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9addec17370ab81eb7e2dd9df4ad51876d8736149cf0b254f1a57410c741b4e1"} {"level":"info","ts":"2026-07-24T17:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9addec17370ab81eb7e2dd9df4ad51876d8736149cf0b254f1a57410c741b4e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9addec17370ab81eb7e2dd9df4ad51876d8736149cf0b254f1a57410c741b4e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7fa0722fa46ae174dd3f395ef17fa61933e61fd3326670809deb7423a81c50d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:57:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:57:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7fa0722fa46ae174dd3f395ef17fa61933e61fd3326670809deb7423a81c50d"} {"level":"info","ts":"2026-07-24T17:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7fa0722fa46ae174dd3f395ef17fa61933e61fd3326670809deb7423a81c50d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7fa0722fa46ae174dd3f395ef17fa61933e61fd3326670809deb7423a81c50d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:57:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:57:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7fa0722fa46ae174dd3f395ef17fa61933e61fd3326670809deb7423a81c50d"} {"level":"info","ts":"2026-07-24T17:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7fa0722fa46ae174dd3f395ef17fa61933e61fd3326670809deb7423a81c50d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7fa0722fa46ae174dd3f395ef17fa61933e61fd3326670809deb7423a81c50d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:57:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:57:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7fa0722fa46ae174dd3f395ef17fa61933e61fd3326670809deb7423a81c50d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T17:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f7fa0722fa46ae174dd3f395ef17fa61933e61fd3326670809deb7423a81c50d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f7fa0722fa46ae174dd3f395ef17fa61933e61fd3326670809deb7423a81c50d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T17:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"997bfa63c633683756d782faf06505ef61a67231101a701c8d35f91b4e6f90a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:57:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:57:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7fa0722fa46ae174dd3f395ef17fa61933e61fd3326670809deb7423a81c50d"} {"level":"info","ts":"2026-07-24T17:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/997bfa63c633683756d782faf06505ef61a67231101a701c8d35f91b4e6f90a4"} {"level":"info","ts":"2026-07-24T17:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"997bfa63c633683756d782faf06505ef61a67231101a701c8d35f91b4e6f90a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7fa0722fa46ae174dd3f395ef17fa61933e61fd3326670809deb7423a81c50d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:57:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:57:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7fa0722fa46ae174dd3f395ef17fa61933e61fd3326670809deb7423a81c50d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:57:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/997bfa63c633683756d782faf06505ef61a67231101a701c8d35f91b4e6f90a4"} {"level":"info","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7fa0722fa46ae174dd3f395ef17fa61933e61fd3326670809deb7423a81c50d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"997bfa63c633683756d782faf06505ef61a67231101a701c8d35f91b4e6f90a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:57:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:57:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["997bfa63c633683756d782faf06505ef61a67231101a701c8d35f91b4e6f90a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7fa0722fa46ae174dd3f395ef17fa61933e61fd3326670809deb7423a81c50d"} {"level":"info","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"997bfa63c633683756d782faf06505ef61a67231101a701c8d35f91b4e6f90a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7fa0722fa46ae174dd3f395ef17fa61933e61fd3326670809deb7423a81c50d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c1d70081d965d5b5dbc04f9ce38dd475f9575222bcc260e7ec4de0e84f59bf9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:57:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:57:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c1d70081d965d5b5dbc04f9ce38dd475f9575222bcc260e7ec4de0e84f59bf9"} {"level":"info","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c1d70081d965d5b5dbc04f9ce38dd475f9575222bcc260e7ec4de0e84f59bf9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"997bfa63c633683756d782faf06505ef61a67231101a701c8d35f91b4e6f90a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:57:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:57:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"997bfa63c633683756d782faf06505ef61a67231101a701c8d35f91b4e6f90a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c1d70081d965d5b5dbc04f9ce38dd475f9575222bcc260e7ec4de0e84f59bf9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:57:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:57:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c1d70081d965d5b5dbc04f9ce38dd475f9575222bcc260e7ec4de0e84f59bf9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/997bfa63c633683756d782faf06505ef61a67231101a701c8d35f91b4e6f90a4"} {"level":"info","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c1d70081d965d5b5dbc04f9ce38dd475f9575222bcc260e7ec4de0e84f59bf9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"997bfa63c633683756d782faf06505ef61a67231101a701c8d35f91b4e6f90a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:57:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:57:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["997bfa63c633683756d782faf06505ef61a67231101a701c8d35f91b4e6f90a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c1d70081d965d5b5dbc04f9ce38dd475f9575222bcc260e7ec4de0e84f59bf9"} {"level":"info","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"997bfa63c633683756d782faf06505ef61a67231101a701c8d35f91b4e6f90a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c1d70081d965d5b5dbc04f9ce38dd475f9575222bcc260e7ec4de0e84f59bf9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"997bfa63c633683756d782faf06505ef61a67231101a701c8d35f91b4e6f90a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:57:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:57:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/997bfa63c633683756d782faf06505ef61a67231101a701c8d35f91b4e6f90a4"} {"level":"info","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"997bfa63c633683756d782faf06505ef61a67231101a701c8d35f91b4e6f90a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5d0b5c377f01c03347abb470b32997652fad3b28d0a3a5e2f912945264883e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:57:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:57:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c1d70081d965d5b5dbc04f9ce38dd475f9575222bcc260e7ec4de0e84f59bf9"} {"level":"info","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5d0b5c377f01c03347abb470b32997652fad3b28d0a3a5e2f912945264883e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"997bfa63c633683756d782faf06505ef61a67231101a701c8d35f91b4e6f90a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5d0b5c377f01c03347abb470b32997652fad3b28d0a3a5e2f912945264883e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c7ec92485e62b828b5d9f3e43471dc9e22e8668755bc385e1c41c4c42291882","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:57:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:57:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/997bfa63c633683756d782faf06505ef61a67231101a701c8d35f91b4e6f90a4"} {"level":"info","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5d0b5c377f01c03347abb470b32997652fad3b28d0a3a5e2f912945264883e6"} {"level":"info","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c7ec92485e62b828b5d9f3e43471dc9e22e8668755bc385e1c41c4c42291882","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5d0b5c377f01c03347abb470b32997652fad3b28d0a3a5e2f912945264883e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:57:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:57:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5d0b5c377f01c03347abb470b32997652fad3b28d0a3a5e2f912945264883e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c7ec92485e62b828b5d9f3e43471dc9e22e8668755bc385e1c41c4c42291882"} {"level":"info","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5d0b5c377f01c03347abb470b32997652fad3b28d0a3a5e2f912945264883e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"997bfa63c633683756d782faf06505ef61a67231101a701c8d35f91b4e6f90a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:57:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:57:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["997bfa63c633683756d782faf06505ef61a67231101a701c8d35f91b4e6f90a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c7ec92485e62b828b5d9f3e43471dc9e22e8668755bc385e1c41c4c42291882"} {"level":"info","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"997bfa63c633683756d782faf06505ef61a67231101a701c8d35f91b4e6f90a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c7ec92485e62b828b5d9f3e43471dc9e22e8668755bc385e1c41c4c42291882","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:57:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:57:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5c7ec92485e62b828b5d9f3e43471dc9e22e8668755bc385e1c41c4c42291882"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5d0b5c377f01c03347abb470b32997652fad3b28d0a3a5e2f912945264883e6"} {"level":"info","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c7ec92485e62b828b5d9f3e43471dc9e22e8668755bc385e1c41c4c42291882","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5d0b5c377f01c03347abb470b32997652fad3b28d0a3a5e2f912945264883e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"997bfa63c633683756d782faf06505ef61a67231101a701c8d35f91b4e6f90a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:57:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:57:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/997bfa63c633683756d782faf06505ef61a67231101a701c8d35f91b4e6f90a4"} {"level":"info","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"997bfa63c633683756d782faf06505ef61a67231101a701c8d35f91b4e6f90a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c7ec92485e62b828b5d9f3e43471dc9e22e8668755bc385e1c41c4c42291882","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:57:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:57:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c7ec92485e62b828b5d9f3e43471dc9e22e8668755bc385e1c41c4c42291882"} {"level":"info","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c7ec92485e62b828b5d9f3e43471dc9e22e8668755bc385e1c41c4c42291882","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"997bfa63c633683756d782faf06505ef61a67231101a701c8d35f91b4e6f90a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c7ec92485e62b828b5d9f3e43471dc9e22e8668755bc385e1c41c4c42291882","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:57:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:57:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5c7ec92485e62b828b5d9f3e43471dc9e22e8668755bc385e1c41c4c42291882"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/997bfa63c633683756d782faf06505ef61a67231101a701c8d35f91b4e6f90a4"} {"level":"info","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c7ec92485e62b828b5d9f3e43471dc9e22e8668755bc385e1c41c4c42291882","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"997bfa63c633683756d782faf06505ef61a67231101a701c8d35f91b4e6f90a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:57:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:57:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["997bfa63c633683756d782faf06505ef61a67231101a701c8d35f91b4e6f90a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c7ec92485e62b828b5d9f3e43471dc9e22e8668755bc385e1c41c4c42291882"} {"level":"info","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"997bfa63c633683756d782faf06505ef61a67231101a701c8d35f91b4e6f90a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c7ec92485e62b828b5d9f3e43471dc9e22e8668755bc385e1c41c4c42291882","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:57:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:57:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c7ec92485e62b828b5d9f3e43471dc9e22e8668755bc385e1c41c4c42291882"} {"level":"info","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a933bee739a34f3e8019cd42412198c339230e5d621f3d50ed21315d09676bb"} {"level":"info","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c7ec92485e62b828b5d9f3e43471dc9e22e8668755bc385e1c41c4c42291882","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a933bee739a34f3e8019cd42412198c339230e5d621f3d50ed21315d09676bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:57:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:57:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a933bee739a34f3e8019cd42412198c339230e5d621f3d50ed21315d09676bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a933bee739a34f3e8019cd42412198c339230e5d621f3d50ed21315d09676bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"997bfa63c633683756d782faf06505ef61a67231101a701c8d35f91b4e6f90a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:57:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:57:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/997bfa63c633683756d782faf06505ef61a67231101a701c8d35f91b4e6f90a4"} {"level":"info","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"997bfa63c633683756d782faf06505ef61a67231101a701c8d35f91b4e6f90a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dfd2a49b7ca9f46936089563393f95ff0a577e4aaf405f0ff1f79c7f07f32e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:57:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:57:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dfd2a49b7ca9f46936089563393f95ff0a577e4aaf405f0ff1f79c7f07f32e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c7ec92485e62b828b5d9f3e43471dc9e22e8668755bc385e1c41c4c42291882","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:57:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:57:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5c7ec92485e62b828b5d9f3e43471dc9e22e8668755bc385e1c41c4c42291882"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dfd2a49b7ca9f46936089563393f95ff0a577e4aaf405f0ff1f79c7f07f32e6"} {"level":"info","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c7ec92485e62b828b5d9f3e43471dc9e22e8668755bc385e1c41c4c42291882","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a933bee739a34f3e8019cd42412198c339230e5d621f3d50ed21315d09676bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"997bfa63c633683756d782faf06505ef61a67231101a701c8d35f91b4e6f90a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:57:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:57:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["997bfa63c633683756d782faf06505ef61a67231101a701c8d35f91b4e6f90a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c7ec92485e62b828b5d9f3e43471dc9e22e8668755bc385e1c41c4c42291882"} {"level":"info","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"997bfa63c633683756d782faf06505ef61a67231101a701c8d35f91b4e6f90a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d251ec9a051a51dfe3c28f86c2577a9a02dd73074494a2047175c2f66b161b5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:57:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:57:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a933bee739a34f3e8019cd42412198c339230e5d621f3d50ed21315d09676bb"} {"level":"info","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d251ec9a051a51dfe3c28f86c2577a9a02dd73074494a2047175c2f66b161b5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9dfd2a49b7ca9f46936089563393f95ff0a577e4aaf405f0ff1f79c7f07f32e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:57:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:57:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9dfd2a49b7ca9f46936089563393f95ff0a577e4aaf405f0ff1f79c7f07f32e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/997bfa63c633683756d782faf06505ef61a67231101a701c8d35f91b4e6f90a4"} {"level":"info","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9dfd2a49b7ca9f46936089563393f95ff0a577e4aaf405f0ff1f79c7f07f32e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fca668886fc3cbdff6f63359666f975367c4f6422982f2b8e6fd26b8ba2b74ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:57:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:57:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d251ec9a051a51dfe3c28f86c2577a9a02dd73074494a2047175c2f66b161b5b"} {"level":"info","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fca668886fc3cbdff6f63359666f975367c4f6422982f2b8e6fd26b8ba2b74ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c7ec92485e62b828b5d9f3e43471dc9e22e8668755bc385e1c41c4c42291882","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05ff5bdbf6f477a8702f98abbf9875058f9e7984c8935b3d2c584eb89d64b19f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:57:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:57:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9dfd2a49b7ca9f46936089563393f95ff0a577e4aaf405f0ff1f79c7f07f32e6"} {"level":"info","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05ff5bdbf6f477a8702f98abbf9875058f9e7984c8935b3d2c584eb89d64b19f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"997bfa63c633683756d782faf06505ef61a67231101a701c8d35f91b4e6f90a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d251ec9a051a51dfe3c28f86c2577a9a02dd73074494a2047175c2f66b161b5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:57:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:57:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d251ec9a051a51dfe3c28f86c2577a9a02dd73074494a2047175c2f66b161b5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fca668886fc3cbdff6f63359666f975367c4f6422982f2b8e6fd26b8ba2b74ac"} {"level":"info","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d251ec9a051a51dfe3c28f86c2577a9a02dd73074494a2047175c2f66b161b5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9dfd2a49b7ca9f46936089563393f95ff0a577e4aaf405f0ff1f79c7f07f32e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fca668886fc3cbdff6f63359666f975367c4f6422982f2b8e6fd26b8ba2b74ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:57:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:57:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fca668886fc3cbdff6f63359666f975367c4f6422982f2b8e6fd26b8ba2b74ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fca668886fc3cbdff6f63359666f975367c4f6422982f2b8e6fd26b8ba2b74ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05ff5bdbf6f477a8702f98abbf9875058f9e7984c8935b3d2c584eb89d64b19f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d251ec9a051a51dfe3c28f86c2577a9a02dd73074494a2047175c2f66b161b5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fca668886fc3cbdff6f63359666f975367c4f6422982f2b8e6fd26b8ba2b74ac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c7ec92485e62b828b5d9f3e43471dc9e22e8668755bc385e1c41c4c42291882"} {"level":"debug","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05ff5bdbf6f477a8702f98abbf9875058f9e7984c8935b3d2c584eb89d64b19f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T17:57:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T17:57:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05ff5bdbf6f477a8702f98abbf9875058f9e7984c8935b3d2c584eb89d64b19f"} {"level":"info","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05ff5bdbf6f477a8702f98abbf9875058f9e7984c8935b3d2c584eb89d64b19f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05ff5bdbf6f477a8702f98abbf9875058f9e7984c8935b3d2c584eb89d64b19f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:57:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:57:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["05ff5bdbf6f477a8702f98abbf9875058f9e7984c8935b3d2c584eb89d64b19f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d251ec9a051a51dfe3c28f86c2577a9a02dd73074494a2047175c2f66b161b5b"} {"level":"info","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05ff5bdbf6f477a8702f98abbf9875058f9e7984c8935b3d2c584eb89d64b19f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05ff5bdbf6f477a8702f98abbf9875058f9e7984c8935b3d2c584eb89d64b19f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T17:57:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T17:57:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["05ff5bdbf6f477a8702f98abbf9875058f9e7984c8935b3d2c584eb89d64b19f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"05ff5bdbf6f477a8702f98abbf9875058f9e7984c8935b3d2c584eb89d64b19f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"05ff5bdbf6f477a8702f98abbf9875058f9e7984c8935b3d2c584eb89d64b19f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05ff5bdbf6f477a8702f98abbf9875058f9e7984c8935b3d2c584eb89d64b19f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05ff5bdbf6f477a8702f98abbf9875058f9e7984c8935b3d2c584eb89d64b19f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fca668886fc3cbdff6f63359666f975367c4f6422982f2b8e6fd26b8ba2b74ac"} {"level":"info","ts":"2026-07-24T17:57:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05ff5bdbf6f477a8702f98abbf9875058f9e7984c8935b3d2c584eb89d64b19f"} {"level":"info","ts":"2026-07-24T17:57:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"84d39f40-d2b6-4c58-88f4-9dfc76288e89","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50194","PortSpecifier":{"PortValue":50194}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"84d39f40-d2b6-4c58-88f4-9dfc76288e89","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-8a6414.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:57:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"84d39f40-d2b6-4c58-88f4-9dfc76288e89","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50194","PortSpecifier":{"PortValue":50194}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915878,"nanos":485313539},"http":{"id":"84d39f40-d2b6-4c58-88f4-9dfc76288e89","method":"POST","headers":{":authority":"e2e-ipp-a-8a6414.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:57:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"84d39f40-d2b6-4c58-88f4-9dfc76288e89","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T17:57:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"84d39f40-d2b6-4c58-88f4-9dfc76288e89","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"badbe5d4-7ab5-425e-9873-63296dbdc8e7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=2af0cd97-f569-450c-a76b-6c8d1b91d569"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/69d61257011a"]}} {"level":"debug","ts":"2026-07-24T17:57:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"84d39f40-d2b6-4c58-88f4-9dfc76288e89","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/69d61257011a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=2af0cd97-f569-450c-a76b-6c8d1b91d569"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"badbe5d4-7ab5-425e-9873-63296dbdc8e7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2a933bee739a34f3e8019cd42412198c339230e5d621f3d50ed21315d09676bb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-8a6414.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:57:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"84d39f40-d2b6-4c58-88f4-9dfc76288e89","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:57:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"84d39f40-d2b6-4c58-88f4-9dfc76288e89","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:57:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"84d39f40-d2b6-4c58-88f4-9dfc76288e89","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-8a6414/ipp-route-8a6414\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-8a6414/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:57:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"84d39f40-d2b6-4c58-88f4-9dfc76288e89","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T17:57:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"84d39f40-d2b6-4c58-88f4-9dfc76288e89","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:57:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"84d39f40-d2b6-4c58-88f4-9dfc76288e89","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T17:57:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"84d39f40-d2b6-4c58-88f4-9dfc76288e89","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:57:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"84d39f40-d2b6-4c58-88f4-9dfc76288e89","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:58:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"07d340a0-c453-407b-addc-032ddef35721","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50208","PortSpecifier":{"PortValue":50208}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"07d340a0-c453-407b-addc-032ddef35721","method":"POST","path":"/ai-tenant-e2e-ipp-a-8a6414/ipp-route-8a6414/v1/chat/completions","host":"e2e-ipp-a-8a6414.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T17:58:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"07d340a0-c453-407b-addc-032ddef35721","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50208","PortSpecifier":{"PortValue":50208}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784915880,"nanos":548916240},"http":{"id":"07d340a0-c453-407b-addc-032ddef35721","method":"POST","headers":{":authority":"e2e-ipp-a-8a6414.apps.9f6fe4b9-53b4-4329-baf3-69d61257011a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-8a6414/ipp-route-8a6414/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:58:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"07d340a0-c453-407b-addc-032ddef35721","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1FC9U6UIXmHLictiv_poJ1kjOmmKzTUNqO4uX326z4SwlG3nZZ0kQJQvauK0u"} {"level":"debug","ts":"2026-07-24T17:58:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"07d340a0-c453-407b-addc-032ddef35721","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-8a6414.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1FC9U6UIXmHLictiv_poJ1kjOmmKzTUNqO4uX326z4SwlG3nZZ0kQJQvauK0u\"}"} {"level":"debug","ts":"2026-07-24T17:58:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"07d340a0-c453-407b-addc-032ddef35721","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-8a6414.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f6287e7d-43b9-423d-abe4-e9629bc85a19","keyName":"e2e-ipp-8a6414","subscription":"ipp-route-8a6414-sub","tenant":"e2e-ipp-a-8a6414","userId":"f6287e7d-43b9-423d-abe4-e9629bc85a19","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T17:58:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"07d340a0-c453-407b-addc-032ddef35721","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-8a6414.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-ipp-a-8a6414/ipp-route-8a6414\",\"requestedSubscription\":\"ipp-route-8a6414-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T17:58:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"07d340a0-c453-407b-addc-032ddef35721","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-8a6414.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-8a6414/models/facebook/opt-125m","name":"ipp-route-8a6414","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-8a6414-sub","namespace":"ai-tenant-e2e-ipp-a-8a6414","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-8a6414/ipp-route-8a6414"}} {"level":"debug","ts":"2026-07-24T17:58:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"07d340a0-c453-407b-addc-032ddef35721","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T17:58:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07d340a0-c453-407b-addc-032ddef35721","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:58:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07d340a0-c453-407b-addc-032ddef35721","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:58:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07d340a0-c453-407b-addc-032ddef35721","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-8a6414/ipp-route-8a6414\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-8a6414/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:58:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07d340a0-c453-407b-addc-032ddef35721","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T17:58:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"07d340a0-c453-407b-addc-032ddef35721","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T17:58:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"07d340a0-c453-407b-addc-032ddef35721","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-8a6414-sub"} {"level":"debug","ts":"2026-07-24T17:58:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"07d340a0-c453-407b-addc-032ddef35721","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T17:58:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"07d340a0-c453-407b-addc-032ddef35721","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f6287e7d-43b9-423d-abe4-e9629bc85a19","keyName":"e2e-ipp-8a6414","selected_subscription":"ipp-route-8a6414-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-8a6414/ipp-route-8a6414-sub@ai-tenant-e2e-ipp-a-8a6414/ipp-route-8a6414","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-8a6414/models/facebook/opt-125m","name":"ipp-route-8a6414","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-8a6414-sub","namespace":"ai-tenant-e2e-ipp-a-8a6414","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-8a6414/ipp-route-8a6414"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T17:58:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"07d340a0-c453-407b-addc-032ddef35721","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T17:58:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"07d340a0-c453-407b-addc-032ddef35721","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T17:59:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9dfd2a49b7ca9f46936089563393f95ff0a577e4aaf405f0ff1f79c7f07f32e6"} {"level":"info","ts":"2026-07-24T17:59:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a933bee739a34f3e8019cd42412198c339230e5d621f3d50ed21315d09676bb"} {"level":"info","ts":"2026-07-24T17:59:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9c1d70081d965d5b5dbc04f9ce38dd475f9575222bcc260e7ec4de0e84f59bf9"} {"level":"info","ts":"2026-07-24T17:59:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/05ff5bdbf6f477a8702f98abbf9875058f9e7984c8935b3d2c584eb89d64b19f"} {"level":"info","ts":"2026-07-24T17:59:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9addec17370ab81eb7e2dd9df4ad51876d8736149cf0b254f1a57410c741b4e1"} {"level":"info","ts":"2026-07-24T17:59:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f7fa0722fa46ae174dd3f395ef17fa61933e61fd3326670809deb7423a81c50d"} {"level":"info","ts":"2026-07-24T17:59:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/676a1ee37a67ef4849e312d86013524035103a42afb1b42986efaddb1ed025b5"} {"level":"info","ts":"2026-07-24T17:59:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a5d0b5c377f01c03347abb470b32997652fad3b28d0a3a5e2f912945264883e6"} {"level":"info","ts":"2026-07-24T17:59:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5c7ec92485e62b828b5d9f3e43471dc9e22e8668755bc385e1c41c4c42291882"} {"level":"info","ts":"2026-07-24T17:59:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d251ec9a051a51dfe3c28f86c2577a9a02dd73074494a2047175c2f66b161b5b"} {"level":"info","ts":"2026-07-24T17:59:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/997bfa63c633683756d782faf06505ef61a67231101a701c8d35f91b4e6f90a4"} {"level":"info","ts":"2026-07-24T17:59:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fca668886fc3cbdff6f63359666f975367c4f6422982f2b8e6fd26b8ba2b74ac"}